actions/upload-code-coverage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add helpful error for missing permissions

Browse Source 
When the upload returns 403, surface a clear message telling the
caller to set security-events:write on their job, with a link to
the README's permissions section.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This commit is contained in:
Joshua Hale
2026-03-30 11:36:35 +01:00
parent fb6ed62786
commit f0f93e2527
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
action.yml
+10 -2
View File
@@ -72,7 +72,15 @@ runs:
&& mv __body_tmp.json __body.json && mv __body_tmp.json __body.json
fi fi
gh api --method PUT "/repos/${{ github.repository }}/code-coverage/report" \ UPLOAD_OUTPUT=$(gh api --method PUT "/repos/${{ github.repository }}/code-coverage/report" \
--input __body.json --input __body.json 2>&1) || {
if echo "$UPLOAD_OUTPUT" | grep -qi "not authorized"; then
echo "::error::Coverage upload returned 403 Forbidden. Ensure the calling job has 'security-events: write' permission. See https://github.com/code-quality-org/upload-code-coverage-action#permissions"
else
echo "::error::Coverage upload failed: $UPLOAD_OUTPUT"
fi
rm -f __coverage_b64.txt __body.json
exit 1
}
rm -f __coverage_b64.txt __body.json rm -f __coverage_b64.txt __body.json