aws-cloudformation / aws-cloudformation/cloudformation-guard

[github action] action fails - gh auth login

Open
#652 1 comment 0 reactions 0 assignees View on GitHub
guidance
Dominant language
Rust
Stars
1.4k
Forks
196
Avg merge
3d 6h
Merged PRs (30d)
5

Description

**Describe the issue**

My github repository is private.

Github token for workflows is created https://docs.github.com/en/actions/concepts/security/github_token

Image

The action is failing

Image

```yaml
name: Cloudformation - Validate
on:
pull_request:

permissions:
contents: read
issues: read
checks: write
pull-requests: write
id-token: write

env:
AWS_REGION: eu-central-1

jobs:
cfn-aguard:
runs-on: ubuntu-latest
if: github.event_name == 'pull_request'

steps:
- name: Checkout code
uses: actions/checkout@v5
with:
fetch-depth: 0

- name: Run cfn-guard
uses: aws-cloudformation/cloudformation-guard@action-v0.0.5
with:
rules: './cf_rules'
data: './cf_templates'
analyze: true
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
```

**Operating System:**
[Ubuntu]

Cc @joshfried-aws @dannyvassallo

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the failure from the workflow shown on Ubuntu with a private repository, using actions/checkout@v5 and cloudformation-guard@action-v0.0.5. Inspect the GitHub Actions log around gh auth login and the GITHUB_TOKEN configuration. Done means the workflow authenticates successfully and completes the cfn-guard validation.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, github-actions
Domain
ci-cd, cloud
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
32/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.