Description
All GitHub Actions jobs (unit tests, docstring coverage, code scan, docs, etc.) are failing with the error:
Failed: An unhandled error has occurred: Input required and not supplied: token
This happens on all PRs originating from forks, regardless of the code change.
This happens on all PRs originating from forks, regardless of the code change.
Possible solution: Consider switching to pull_request_target event, providing token: ${{ secrets.GITHUB_TOKEN }} where needed, and/or restricting sensitive steps to internal PRs only.
Reproduction Repo/Script (if any)
https://github.com/atlanhq/application-sdk/actions/runs/18271392670/job/52014332235?pr=745
Reproduction Steps
1. Fork the repository.
2. Push any branch and open a pull request from the fork to the base repository.
3. Observe that all CI jobs fail with the above error.
4. Note: This only affects PRs from forks (external contributors); org members do not see this issue.
Logs / Tracebacks
Failed: An unhandled error has occurred: Input required and not supplied: token
Error: Resource not accessible by integration
Expected vs Actual
Expected:
CI jobs should run and report results for PRs from forks, as long as the jobs do not require sensitive secrets or write access.
Actual:
All jobs fail immediately due to missing or inaccessible token input.
Environment
None
SDK Version
N/A (happens regardless of SDK version; this is a CI/workflow issue)
Description
All GitHub Actions jobs (unit tests, docstring coverage, code scan, docs, etc.) are failing with the error:
Failed: An unhandled error has occurred: Input required and not supplied: tokenThis happens on all PRs originating from forks, regardless of the code change.
This happens on all PRs originating from forks, regardless of the code change.
Possible solution: Consider switching to pull_request_target event, providing token: ${{ secrets.GITHUB_TOKEN }} where needed, and/or restricting sensitive steps to internal PRs only.
Reproduction Repo/Script (if any)
https://github.com/atlanhq/application-sdk/actions/runs/18271392670/job/52014332235?pr=745
Reproduction Steps
Logs / Tracebacks
Expected vs Actual
Expected:
CI jobs should run and report results for PRs from forks, as long as the jobs do not require sensitive secrets or write access.
Actual:
All jobs fail immediately due to missing or inaccessible token input.
Environment
None
SDK Version
N/A (happens regardless of SDK version; this is a CI/workflow issue)