⚠️ Not working with forks

[samuelmeuli]

Creating annotations and auto-fixes works as expected when the code is on a branch in the same repository.

Unfortunately, it currently doesn't seem work with pull requests from forks: The action has no permission to push auto-fix changes or create annotations.

[samuelmeuli]

It seems like this is impossible with GitHub's current token scopes.

The action needs permissions for two operations:

• Permission to create annotations with GitHub's Check Runs API to display the user's linting errors
• Permission to push changes with Git (if auto_fix: true)

If the action is triggered on changes to the main repository, it will work because the GITHUB_TOKEN has permissions to modify that repository. On forks, however, this becomes tricky to impossible:

	push event	pull_request event
commit to main repo	[Expected behavior] Annotations and auto-fixing work	[Expected behavior] Annotations and auto-fixing work
commit to fork	[Expected behavior] User needs to manually activate GitHub Actions on the fork. Even then, annotations will not display on PRs from that fork.	[Unexpected behavior] No permission to push auto-fix changes to the fork. No permission to create annotations.

Note that the pull_request event always runs on the main repository, even for pushes to the fork. The token scopes are defined accordingly.

If anybody is aware of a workaround, I'd be very happy to hear it :)

Related: actions/checkout#124 (comment)

[samuelmeuli]

All I can do for now is document these limitations in the README and provide more helpful error messages.

If you'd also like to see these permissions changed, please submit feedback to GitHub.