René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Workflows are missing permissions requests","articleBody":"https://github.com/check-spelling-sandbox/codeql/actions/runs/7699091660/workflow\r\n\r\nhttps://github.com/check-spelling-sandbox/codeql/actions/runs/7699091660/job/20979906681#step:19:55\r\n\r\n```\r\nPost job cleanup.\r\nWarning: Debugging artifacts are unavailable since the 'init' Action failed before it could produce any.\r\nRequestError [HttpError]: Resource not accessible by integration\r\n    at /home/runner/work/_actions/github/codeql-action/v2/node_modules/@octokit/request/dist-node/index.js:86:21\r\n    at processTicksAndRejections (node:internal/process/task_queues:96:5)\r\n    at async requestWithGraphqlErrorHandling (/home/runner/work/_actions/github/codeql-action/v2/node_modules/@octokit/plugin-retry/dist-node/index.js:71:20)\r\n    at async Job.doExecute (/home/runner/work/_actions/github/codeql-action/v2/node_modules/bottleneck/light.js:405:18) {\r\n  status: 403,\r\n  response: {\r\n    url: 'https://api.github.com/repos/check-spelling-sandbox/codeql/code-scanning/analysis/status',\r\n    status: 403,\r\n    headers: {\r\n      'access-control-allow-origin': '*',\r\n      'access-control-expose-headers': 'ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset',\r\n      connection: 'close',\r\n      'content-encoding': 'gzip',\r\n      'content-security-policy': \"default-src 'none'\",\r\n      'content-type': 'application/json; charset=utf-8',\r\n      date: 'Mon, 29 Jan 2024 16:16:02 GMT',\r\n      'referrer-policy': 'origin-when-cross-origin, strict-origin-when-cross-origin',\r\n      server: 'GitHub.com',\r\n      'strict-transport-security': 'max-age=31536000; includeSubdomains; preload',\r\n      'transfer-encoding': 'chunked',\r\n      vary: 'Accept-Encoding, Accept, X-Requested-With',\r\n      'x-content-type-options': 'nosniff',\r\n      'x-frame-options': 'deny',\r\n      'x-github-api-version-selected': '2022-11-28',\r\n      'x-github-media-type': 'github.v3; format=json',\r\n      'x-github-request-id': '94E3:79CB:3878D:7311B:65B7CF42',\r\n      'x-ratelimit-limit': '1000',\r\n      'x-ratelimit-remaining': '961',\r\n      'x-ratelimit-reset': '1706548556',\r\n      'x-ratelimit-resource': 'core',\r\n      'x-ratelimit-used': '39',\r\n      'x-xss-protection': '0'\r\n    },\r\n    data: {\r\n      message: 'Resource not accessible by integration',\r\n      documentation_url: 'https://docs.github.com/rest'\r\n    }\r\n  },\r\n  request: {\r\n    method: 'PUT',\r\n    url: 'https://api.github.com/repos/check-spelling-sandbox/codeql/code-scanning/analysis/status',\r\n    headers: {\r\n      accept: 'application/vnd.github.v3+json',\r\n      'user-agent': 'CodeQL-Action/2.23.2 octokit-core.js/3.6.0 Node.js/16.20.2 (linux; x64)',\r\n      authorization: 'token [REDACTED]',\r\n      'content-type': 'application/json; charset=utf-8'\r\n    },\r\n    body: '{\"action_name\":\"init-post\",\"action_oid\":\"unknown\",\"action_ref\":\"v2\",\"action_started_at\":\"2024-01-29T16:16:02.392Z\",\"action_version\":\"2.23.2\",\"analysis_key\":\".github/workflows/ql-for-ql-dataset_measure.yml:measure\",\"commit_oid\":\"aeae208dc3291109d6c798179bb8944961348823\",\"job_name\":\"measure\",\"job_run_uuid\":\"75681a8a-17f0-4c74-b850-172cffab9a66\",\"ref\":\"refs/heads/main\",\"runner_available_disk_space_bytes\":31716970496,\"runner_os\":\"Linux\",\"runner_total_disk_space_bytes\":89297309696,\"started_at\":\"2024-01-29T16:16:01.614Z\",\"status\":\"success\",\"testing_environment\":\"\",\"workflow_name\":\"Collect database stats for QL for QL\",\"workflow_run_attempt\":1,\"workflow_run_id\":7699091660,\"completed_at\":\"2024-01-29T16:16:02.416Z\",\"matrix_vars\":\"{\\\\n  \\\\\"repo\\\\\": \\\\\"github/codeql\\\\\"\\\\n}\",\"runner_arch\":\"X64\",\"runner_image_version\":\"20240126.1.0\",\"job_status\":\"JOB_STATUS_UNKNOWN\"}',\r\n    request: { agent: [Agent], hook: [Function: bound bound register] }\r\n  }\r\n}\r\nError: Resource not accessible by integration\r\n```\r\n\r\nI presume that it needs:\r\n\r\n```\r\npermissions:\r\n  security-events: write\r\n```\r\n\r\nor similar, but this api isn't documented in https://docs.github.com/en/rest/authentication/permissions-required-for-github-apps?apiVersion=2022-11-28 so I have absolutely no idea.","author":{"url":"https://github.com/jsoref","@type":"Person","name":"jsoref"},"datePublished":"2024-01-29T17:47:23.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":13},"url":"https://github.com/15462/codeql/issues/15462"}