René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Enhance setup-python Action in GitHub Enterprise Server with Raw API Fallback Mechanism","articleBody":"**Description:**\r\n\r\nIn the context of GitHub Enterprise Server (GHES), it is typical for runners to share the same IP address due to Network Address Translation (NAT). This configuration results in the quick exhaustion of the unauthenticated rate limit (60 requests per hour per IP address) when accessing the `versions-manifest.json` file, leading to failures in the `setup-python` action. The current workaround is to incorporate [a \"github.com\" token into the `setup-python` action](https://github.com/actions/setup-python/blob/main/docs/advanced-usage.md#avoiding-rate-limit-issues). Although this solution is functional, it necessitates the creation of an additional github.com token (and technical user) for each repository/team, which is not optimal. Moreover, Pull Requests from forks are not supported due to their lack of access to the secret. \r\n\r\nA potential improvement could be leveraging the `raw` API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token.\r\n\r\n**Justification:**\r\nOur GitHub Enterprise Server has frequently encountered rate limit issues, and the manual token addition method does not scale well. Utilizing the raw API as a fallback could provide an automatic workaround for this issue. If this approach fails, users can still resort to adding a token.\r\n\r\n**Are you willing to submit a PR?**\r\nI have created a fork to verify that the raw API isn't affected by the rate limit and can be used as a fallback solution. (https://github.com/actions/setup-python/compare/main...Shegox:setup-python:raw-access?expand=1)\r\n\r\nThe log extract from the workaround is as follows:\r\n\r\n```\r\n  Version 3.10 was not found in the local cache\r\n  ##[debug]Getting manifest from actions/python-versions@main\r\n  ##[debug]{\"name\":\"HttpClientError\",\"statusCode\":403,\"result\":{\"message\":\"API rate limit exceeded for xx.xx.xx.xx. (But here's the good news: Authenticated requests get a higher rate limit. Check out the documentation for more details.)\",\"documentation_url\":\"https://docs.github.com/rest/overview/resources-in-the-rest-api#rate-limiting\"}}\r\n  ##[debug]Fetching via the API failed. Fetching using raw URL.\r\n  ##[debug]check 3.13.0-alpha.1 satisfies 3.10\r\n  ##[debug]check 3.12.0 satisfies 3.10\r\n  ##[debug]check 3.12.0-rc.3 satisfies 3.10\r\n  ##[debug]check 3.12.0-rc.2 satisfies 3.10\r\n  ##[debug]check 3.12.0-rc.1 satisfies 3.10\r\n```\r\n\r\nI am prepared to submit a PR incorporating the proposed changes. \r\nBefore proposing this PR I wanted to check if that would be accepted or if there are other ideas to overcome this?\r\n\r\n**Related Issues**\r\n\r\n- https://github.com/actions/setup-python/issues/683\r\n- https://github.com/actions/setup-python/issues/638\r\n- https://github.com/actions/setup-python/issues/666\r\n- https://github.com/actions/setup-python/pull/316\r\n- #720 ","author":{"url":"https://github.com/Shegox","@type":"Person","name":"Shegox"},"datePublished":"2023-10-31T12:57:44.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":6},"url":"https://github.com/756/setup-python/issues/756"}