denied: Resource not accessible by integration on docker push

[alvinjohnsonso]

Hi! I'm receiving the error denied: Resource not accessible by integration when composer is setting up. What's actually weird is that the one on the forked repo works just fine. Only the main repo is experiencing that error.

Not really sure what happened. The workflow file came from the forked repo and just got merged into the main repo yesterday. So today was the first time the workflow ran in the main repo. Was wondering if that would have any effect on the build steps.

Here are the logs from the main repo on when the composer github actions is triggered

Run php-actions/composer@v6
  with:
    version: latest
    php_version: latest
    command: install
    interaction: no
    dev: yes
    progress: no
    quiet: no
Run bash <(curl -s https://raw.githubusercontent.com/php-actions/php-build/330b13bbb1eadd05bbb627477c1549cd7e62e406/php-build.bash) composer \ && /home/runner/work/_actions/php-actions/composer/v6/composer-action.bash || { echo "::group::Debug output" ; cat /home/runner/work/tawk-url-utils/tawk-url-utils/output.log ; echo "::endgroup::" ; exit 1; }
  bash <(curl -s https://raw.githubusercontent.com/php-actions/php-build/330b13bbb1eadd05bbb627477c1549cd7e62e406/php-build.bash) composer \ && /home/runner/work/_actions/php-actions/composer/v6/composer-action.bash || { echo "::group::Debug output" ; cat /home/runner/work/tawk-url-utils/tawk-url-utils/output.log ; echo "::endgroup::" ; exit 1; }
  shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}
  env:
    ACTION_VERSION: latest
    ACTION_PHP_VERSION: latest
    ACTION_PHP_EXTENSIONS: 
    ACTION_TOKEN: ***
    ACTION_COMMAND: install
    ACTION_ONLY_ARGS: 
    ACTION_INTERACTION: no
    ACTION_DEV: yes
    ACTION_PROGRESS: no
    ACTION_QUIET: no
    ACTION_ARGS: 
    ACTION_SSH_KEY: 
    ACTION_SSH_KEY_PUB: 
    ACTION_SSH_DOMAIN: 
    ACTION_WORKING_DIR: 
    ACTION_MEMORY_LIMIT: 
Building PHP latest with extensions:  ...
Debug output
  Running php-build composer
  WARNING! Your password will be stored unencrypted in /home/runner/.docker/config.json.
  Configure a credential helper to remove this warning. See
  https://docs.docker.com/engine/reference/commandline/login/#credentials-store
  
  Login Succeeded
  Pulling docker.pkg.github.com/tawk/tawk-url-utils/php-actions_composer_tawk-url-utils:php-latest-build2
  Error response from daemon: repository docker.pkg.github.com/tawk/tawk-url-utils/php-actions_composer_tawk-url-utils not found: name unknown: docker package "php-actions_composer_tawk-url-utils" does not exist under owner "tawk/tawk-url-utils"
  Dockerfile:
  FROM php:cli-alpine
  RUN apk add --update --no-cache zip git bash openssh
  Sending build context to Docker daemon  213.5kB
  
  Step 1/2 : FROM php:cli-alpine
  cli-alpine: Pulling from library/php
  a0d0a0d46f8b: Already exists
  153eea49496a: Pulling fs layer
  11efd0df1fcb: Pulling fs layer
  b3f3214c344d: Pulling fs layer
  9abd2f85688c: Pulling fs layer
  83d85b95eb4c: Pulling fs layer
  923d73ddadfa: Pulling fs layer
  711b5c4b02a7: Pulling fs layer
  ee08fa481788: Pulling fs layer
  9abd2f85688c: Waiting
  83d85b95eb4c: Waiting
  923d73ddadfa: Waiting
  711b5c4b02a7: Waiting
  ee08fa481788: Waiting
  11efd0df1fcb: Verifying Checksum
  11efd0df1fcb: Download complete
  b3f3214c344d: Verifying Checksum
  b3f3214c344d: Download complete
  153eea49496a: Verifying Checksum
  153eea49496a: Download complete
  83d85b95eb4c: Verifying Checksum
  83d85b95eb4c: Download complete
  153eea49496a: Pull complete
  9abd2f85688c: Verifying Checksum
  9abd2f85688c: Download complete
  11efd0df1fcb: Pull complete
  923d73ddadfa: Verifying Checksum
  923d73ddadfa: Download complete
  b3f3214c344d: Pull complete
  711b5c4b02a7: Verifying Checksum
  711b5c4b02a7: Download complete
  9abd2f85688c: Pull complete
  ee08fa481788: Verifying Checksum
  ee08fa481788: Download complete
  83d85b95eb4c: Pull complete
  923d73ddadfa: Pull complete
  711b5c4b02a7: Pull complete
  ee08fa481788: Pull complete
  Digest: sha256:6d339aec418226dd8f7fa0c460e3cb805aa11cc6939b0f90cd418eb17bf3343d
  Status: Downloaded newer image for php:cli-alpine
   ---> e4af64d038e1
  Step 2/2 : RUN apk add --update --no-cache zip git bash openssh
   ---> Running in 6dc134cc9949
  fetch https://dl-cdn.alpinelinux.org/alpine/v3.14/main/x86_64/APKINDEX.tar.gz
  fetch https://dl-cdn.alpinelinux.org/alpine/v3.14/community/x86_64/APKINDEX.tar.gz
  (1/14) Installing bash (5.1.4-r0)
  Executing bash-5.1.4-r0.post-install
  (2/14) Installing expat (2.4.1-r0)
  (3/14) Installing pcre2 (10.36-r0)
  (4/14) Installing git (2.32.0-r0)
  (5/14) Installing openssh-keygen (8.6_p1-r3)
  (6/14) Installing libedit (20210216.3.1-r0)
  (7/14) Installing openssh-client-common (8.6_p1-r3)
  (8/14) Installing openssh-client-default (8.6_p1-r3)
  (9/14) Installing openssh-sftp-server (8.6_p1-r3)
  (10/14) Installing openssh-server-common (8.6_p1-r3)
  (11/14) Installing openssh-server (8.6_p1-r3)
  (12/14) Installing openssh (8.6_p1-r3)
  (13/14) Installing unzip (6.0-r9)
  (14/14) Installing zip (3.0-r9)
  Executing busybox-1.33.1-r3.trigger
  OK: 32 MiB in 46 packages
  Removing intermediate container 6dc134cc9949
   ---> 7d2849b01b8a
  Successfully built 7d2849b01b8a
  Successfully tagged docker.pkg.github.com/tawk/tawk-url-utils/php-actions_composer_tawk-url-utils:php-latest-build2
  The push refers to repository [docker.pkg.github.com/tawk/tawk-url-utils/php-actions_composer_tawk-url-utils]
  a72d32fd3f4a: Preparing
  35f0f82afc9e: Preparing
  c06d56e0b756: Preparing
  e8e62190e69f: Preparing
  ff173f43caae: Preparing
  f45ea13356bd: Preparing
  f9955f53e306: Preparing
  366fd11383f1: Preparing
  8c323230b3b1: Preparing
  e2eb06d8af82: Preparing
  f45ea13356bd: Waiting
  f9955f53e306: Waiting
  366fd11383f1: Waiting
  8c323230b3b1: Waiting
  e2eb06d8af82: Waiting
  denied: Resource not accessible by integration
Error: Process completed with exit code 1.

[alvinjohnsonso]

In case you need the workflow file, here's the link to it

https://github.com/tawk/tawk-url-utils/blob/master/.github/workflows/unit-test.yml

[g105b]

Hi @alvinjohnsonso ,

Please can you click the re-run workflow button on this, as Github Actions has been experiencing a bit of downtime over the last 24 hours. As far as I can tell, and as far as githubstatus.com is reporting, these issues have all cleared up now.

Let me know how it goes, and I'll have a look into it if the problem is still there.

Greg.

[alvinjohnsonso]

Hi @g105b, just did a re-run. It's still the same.

https://github.com/tawk/tawk-url-utils/runs/3902573312?check_suite_focus=true
Here's the output

Run php-actions/composer@v6
  with:
    version: latest
    php_version: latest
    command: install
    interaction: no
    dev: yes
    progress: no
    quiet: no
Run bash <(curl -s https://raw.githubusercontent.com/php-actions/php-build/330b13bbb1eadd05bbb627477c1549cd7e62e406/php-build.bash) composer \ && /home/runner/work/_actions/php-actions/composer/v6/composer-action.bash || { echo "::group::Debug output" ; cat /home/runner/work/tawk-url-utils/tawk-url-utils/output.log ; echo "::endgroup::" ; exit 1; }
  bash <(curl -s https://raw.githubusercontent.com/php-actions/php-build/330b13bbb1eadd05bbb627477c1549cd7e62e406/php-build.bash) composer \ && /home/runner/work/_actions/php-actions/composer/v6/composer-action.bash || { echo "::group::Debug output" ; cat /home/runner/work/tawk-url-utils/tawk-url-utils/output.log ; echo "::endgroup::" ; exit 1; }
  shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}
  env:
    ACTION_VERSION: latest
    ACTION_PHP_VERSION: latest
    ACTION_PHP_EXTENSIONS: 
    ACTION_TOKEN: ***
    ACTION_COMMAND: install
    ACTION_ONLY_ARGS: 
    ACTION_INTERACTION: no
    ACTION_DEV: yes
    ACTION_PROGRESS: no
    ACTION_QUIET: no
    ACTION_ARGS: 
    ACTION_SSH_KEY: 
    ACTION_SSH_KEY_PUB: 
    ACTION_SSH_DOMAIN: 
    ACTION_WORKING_DIR: 
    ACTION_MEMORY_LIMIT: 
Building PHP latest with extensions:  ...
Debug output
  Running php-build composer
  WARNING! Your password will be stored unencrypted in /home/runner/.docker/config.json.
  Configure a credential helper to remove this warning. See
  https://docs.docker.com/engine/reference/commandline/login/#credentials-store
  
  Login Succeeded
  Pulling docker.pkg.github.com/tawk/tawk-url-utils/php-actions_composer_tawk-url-utils:php-latest-build2
  Error response from daemon: repository docker.pkg.github.com/tawk/tawk-url-utils/php-actions_composer_tawk-url-utils not found: name unknown: docker package "php-actions_composer_tawk-url-utils" does not exist under owner "tawk/tawk-url-utils"
  Dockerfile:
  FROM php:cli-alpine
  RUN apk add --update --no-cache zip git bash openssh
  Sending build context to Docker daemon  216.1kB
  
  Step 1/2 : FROM php:cli-alpine
  cli-alpine: Pulling from library/php
  a0d0a0d46f8b: Already exists
  153eea49496a: Pulling fs layer
  11efd0df1fcb: Pulling fs layer
  b3f3214c344d: Pulling fs layer
  9abd2f85688c: Pulling fs layer
  83d85b95eb4c: Pulling fs layer
  923d73ddadfa: Pulling fs layer
  711b5c4b02a7: Pulling fs layer
  ee08fa481788: Pulling fs layer
  83d85b95eb4c: Waiting
  923d73ddadfa: Waiting
  711b5c4b02a7: Waiting
  ee08fa481788: Waiting
  9abd2f85688c: Waiting
  11efd0df1fcb: Verifying Checksum
  11efd0df1fcb: Download complete
  b3f3214c344d: Verifying Checksum
  b3f3214c344d: Download complete
  153eea49496a: Verifying Checksum
  153eea49496a: Download complete
  153eea49496a: Pull complete
  83d85b95eb4c: Verifying Checksum
  83d85b95eb4c: Download complete
  11efd0df1fcb: Pull complete
  b3f3214c344d: Pull complete
  9abd2f85688c: Verifying Checksum
  9abd2f85688c: Download complete
  923d73ddadfa: Verifying Checksum
  923d73ddadfa: Download complete
  711b5c4b02a7: Verifying Checksum
  711b5c4b02a7: Download complete
  9abd2f85688c: Pull complete
  83d85b95eb4c: Pull complete
  ee08fa481788: Verifying Checksum
  ee08fa481788: Download complete
  923d73ddadfa: Pull complete
  711b5c4b02a7: Pull complete
  ee08fa481788: Pull complete
  Digest: sha256:67d5574e5ab9b760841c10d6db53f7376eea0272e07144b9b05d3dcdd751be45
  Status: Downloaded newer image for php:cli-alpine
   ---> e4af64d038e1
  Step 2/2 : RUN apk add --update --no-cache zip git bash openssh
   ---> Running in c8daca114e2f
  fetch https://dl-cdn.alpinelinux.org/alpine/v3.14/main/x86_64/APKINDEX.tar.gz
  fetch https://dl-cdn.alpinelinux.org/alpine/v3.14/community/x86_64/APKINDEX.tar.gz
  (1/14) Installing bash (5.1.4-r0)
  Executing bash-5.1.4-r0.post-install
  (2/14) Installing expat (2.4.1-r0)
  (3/14) Installing pcre2 (10.36-r0)
  (4/14) Installing git (2.32.0-r0)
  (5/14) Installing openssh-keygen (8.6_p1-r3)
  (6/14) Installing libedit (20210216.3.1-r0)
  (7/14) Installing openssh-client-common (8.6_p1-r3)
  (8/14) Installing openssh-client-default (8.6_p1-r3)
  (9/14) Installing openssh-sftp-server (8.6_p1-r3)
  (10/14) Installing openssh-server-common (8.6_p1-r3)
  (11/14) Installing openssh-server (8.6_p1-r3)
  (12/14) Installing openssh (8.6_p1-r3)
  (13/14) Installing unzip (6.0-r9)
  (14/14) Installing zip (3.0-r9)
  Executing busybox-1.33.1-r3.trigger
  OK: 32 MiB in 46 packages
  Removing intermediate container c8daca114e2f
   ---> 812b235f3f72
  Successfully built 812b235f3f72
  Successfully tagged docker.pkg.github.com/tawk/tawk-url-utils/php-actions_composer_tawk-url-utils:php-latest-build2
  The push refers to repository [docker.pkg.github.com/tawk/tawk-url-utils/php-actions_composer_tawk-url-utils]
  225a027d899c: Preparing
  35f0f82afc9e: Preparing
  c06d56e0b756: Preparing
  e8e62190e69f: Preparing
  ff173f43caae: Preparing
  f45ea13356bd: Preparing
  f9955f53e306: Preparing
  366fd11383f1: Preparing
  8c323230b3b1: Preparing
  e2eb06d8af82: Preparing
  f45ea13356bd: Waiting
  f9955f53e306: Waiting
  366fd11383f1: Waiting
  8c323230b3b1: Waiting
  e2eb06d8af82: Waiting
  denied: Resource not accessible by integration
Error: Process completed with exit code 1.

[g105b]

Thanks, I'll take a look into this to work out what the issue could be.

[g105b]

Hey @alvinjohnsonso ,

Please could you try something for me? Due to this issue being reported just shortly after Github Actions had an outage, I believe there might be an issue with the created docker image for the workflow runner.

The images should be cached in the repo here: https://github.com/orgs/tawk/packages?repo_name=tawk-url-utils

I can't see the images (which might actually be the issue itself...), so to help rectify the situation, please can you try:

1. Removing any/all images created that are prefixed with php-actions_. They will be recreated next time an action is ran.
2. If there are no packages showing, then there may be a configuration issue on the repo (which would explain why the other repo works fine). Please compare https://github.com/tawk/tawk-url-utils/settings/actions to the working repo, along with the organisation settings https://github.com/organizations/php-actions/tawk/packages

Thank you :)

[alvinjohnsonso]

Heya @g105b,

I really appreciate you taking the time to look into this 😁.

I did the instructions you provided except for the org settings as I don't have access to them 😅. Currently, we don't have any packages on the org. Tried re-running the jobs again and it still failed.

Though, I did a bit more research with the things that you've mentioned and was able to find this article https://github.blog/2020-08-03-github-actions-improvements-for-fork-and-pull-request-workflows/

I'll try adding/changing the pull_request to the pull_request_target event and post the results here.

[alvinjohnsonso]

Heya @g105b!

So it seems that it's an issue on my end. Apologies for creating an issue for this 😅.

Changing the event to pull_request_target works but I saw that it poses a security issue since all forked repos could have READ/WRITE access to the token and secrets that were provided in the workflow. Then I saw an article where they had 2 workflows of which the 1st one does is to consume the workflow trigger from the PR which is then waited by the 2nd workflow using workflow_run that does the main workflow so that it won't have any permission issues.

I'll be closing this thread now since it's not an issue with you guys and wanted to say thanks again for having the time to look into this 😁

[g105b]

No problem @alvinjohnsonso , happy to help!