Missing access for the GITHUB_TOKEN for workflows

[alexvanderberkel]

Select Topic Area

Question

Body

I am working on a GitHub action which synchronizes content from a template repository into decentral repositories. Within the github action we are using different tokens in order to make access to private repositories work. While carrying out a syncrhonization for workflow file I stumbled accross the issue that the permission for the GITHUB_TOKEN cannot be set for updating workflow file.

Error:
refusing to allow a GitHub App to create or update workflow .github/workflows/pr.yamlwithoutworkflowspermission

workflows cannot be set to write apparently and this is a limitation which I would like to have been fixed

https://docs.github.com.mcas.ms/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token#defining-access-for-the-github_token-permissions

permissions:

• actions: read|write|none
• attestations: read|write|none
• checks: read|write|none
• contents: read|write|none
• deployments: read|write|none
• id-token: write|none
• issues: read|write|none
• discussions: read|write|none
• packages: read|write|none
• pages: read|write|none
• pull-requests: read|write|none
• repository-projects: read|write|none
• security-events: read|write|none
• statuses: read|write|none

This is possible for "normal" GitHub actions on the permissions config. Why is this not possible for the default github_token?

Thanks for your help,
Alex

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬