jiayuasu opened a new issue, #2964:
URL: https://github.com/apache/sedona/issues/2964

   ## Problem
   
   The `first-interaction` workflow (`.github/workflows/first-interaction.yml`) 
has been failing on every first-time contributor PR from a fork. Example: 
https://github.com/apache/sedona/actions/runs/25948092616/job/76280307240?pr=2959
   
   The failure is:
   
   ```
   HttpError: Resource not accessible by integration
   status: 403
   url: https://api.github.com/repos/apache/sedona/issues/2959/comments
   ```
   
   ## Root cause
   
   The workflow triggers on `pull_request`. For PRs opened from forks, GitHub 
forces `GITHUB_TOKEN` to read-only regardless of the workflow's declared 
`permissions:` block. The job logs confirm this — it declares `issues: write, 
pull-requests: write` but the runner reports `Issues: read, PullRequests: 
read`, so the comment POST gets a 403.
   
   This means the welcome-message comment has effectively never worked for the 
case it was intended for (first-time external contributors).
   
   ## Proposal
   
   Remove the workflow. It produces a confusing red ❌ on every first-time 
contributor's PR while never actually posting the intended welcome message.
   
   (An alternative would be switching the trigger to `pull_request_target` so 
it runs in the base repo's context with a writable token, but the 
welcome-comment value is marginal and not worth the extra workflow surface 
area.)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to