Fix workflow authentication and context access in publishVersionCheckResults

[Copilot]

The Publish Version Check Results workflow fails with authentication errors and workflow context access issues: git push receives empty BOT_PA_TOKEN, peter-evans/find-comment throws "Input required and not supplied: github-token", and the workflow fails to execute due to invalid context access in reusable workflows.

Root causes:

1. The external reusable workflow from eclipse-platform/eclipse.platform.releng.aggregator is missing github-token parameters on multiple GitHub Actions
2. The reusable workflow attempts to access github.event.workflow_run context, which is not available in workflow_call events

Changes

• Created .github/workflows/publishVersionCheckResults.yml: Local copy of the reusable workflow with authentication and context fixes

  • Added github-token: ${{ secrets.GITHUB_TOKEN }} to actions/github-script steps requiring read access
  • Added github-token: ${{ secrets.githubBotPAT }} to peter-evans/find-comment and comment creation steps
  • Removed invalid github.event.workflow_run context access from job condition
  • Added timeout-minutes: 10 for reliability

• Updated .github/workflows/version-increments.yml:

  • Changed uses: from external repo to local workflow
  • Added explicit permissions: {} declaration
  • Added if: github.event.workflow_run.conclusion == 'success' condition at job level (where context is available)

Example Fixes

Authentication Fix - Before (external workflow):

- name: Find existing information comment
  uses: peter-evans/find-comment@v4.0.0
  with:
    # Missing github-token parameter
    body-regex: '^${{ env.COMMENT_FIRST_LINE }}'

After (local workflow):

- name: Find existing information comment
  uses: peter-evans/find-comment@v4.0.0
  with:
    github-token: ${{ secrets.githubBotPAT }}
    body-regex: '^${{ env.COMMENT_FIRST_LINE }}'

Context Access Fix - Before (reusable workflow):

jobs:
  versions-check-result:
    if: github.event.workflow_run.conclusion != 'skipped'  # Invalid in workflow_call
    runs-on: ubuntu-latest

After (calling workflow):

jobs:
  publish-version-check-results:
    if: github.event.workflow_run.conclusion == 'success'  # Valid in workflow_run
    uses: ./.github/workflows/publishVersionCheckResults.yml

Security

All CodeQL security checks pass with 0 alerts. The workflow now properly validates that it only runs after successful PR check completion.

Original prompt

The latest workflow run Publish Version Check Results in the repository carstenartur/eclipse.jdt.debug failed due to authentication and configuration issues. Specifically:

1. Authentication Error:

   • The git push operation fails with the error:

     Invalid username or token. Password authentication is not supported for Git operations.
     fatal: Authentication failed for 'https://github.com/carstenartur/eclipse.jdt.debug.git/'
     

   • This error indicates that the workflow does not have a valid authentication token configured.

2. Missing Input:

   • The Action peter-evans/find-comment encountered an error:

     Error: Input required and not supplied: github-token.
     

   • A github-token is required but was not supplied to the action.

Tasks:

• Update the .github/workflows/version-increments.yml workflow file to provide the GITHUB_TOKEN or the appropriate secrets for authentication where required.
• Ensure the github-token input is properly configured for the peter-evans/find-comment action to avoid runtime issues.
• Test that the updated workflow runs successfully for various branches.

This change is critical to ensure workflows complete successfully without manual intervention.

This pull request was created as a result of the following prompt from Copilot chat.

The latest workflow run Publish Version Check Results in the repository carstenartur/eclipse.jdt.debug failed due to authentication and configuration issues. Specifically:

1. Authentication Error:

   • The git push operation fails with the error:

     Invalid username or token. Password authentication is not supported for Git operations.
     fatal: Authentication failed for 'https://github.com/carstenartur/eclipse.jdt.debug.git/'
     

   • This error indicates that the workflow does not have a valid authentication token configured.

2. Missing Input:

   • The Action peter-evans/find-comment encountered an error:

     Error: Input required and not supplied: github-token.
     

   • A github-token is required but was not supplied to the action.

Tasks:

• Update the .github/workflows/version-increments.yml workflow file to provide the GITHUB_TOKEN or the appropriate secrets for authentication where required.
• Ensure the github-token input is properly configured for the peter-evans/find-comment action to avoid runtime issues.
• Test that the updated workflow runs successfully for various branches.

This change is critical to ensure workflows complete successfully without manual intervention.

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[carstenartur]

@copilot der build schlägt immer noch fehl

[Copilot]

@copilot der build schlägt immer noch fehl

I've identified and fixed the issue. The problem was that the reusable workflow (workflow_call) cannot access the github.event.workflow_run context, which caused the workflow to fail silently.

Fixed in commits:

• 56bf258: Moved the workflow_run condition to the calling workflow
• 4a0b0a2: Changed condition to only run on successful completion and added timeout

The workflow should now execute properly when a PR completes its checks successfully.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/carstenartur/eclipse.jdt.debug/actions/workflows/version-increments.yml/runs
  • Triggering command: /usr/bin/curl curl -s REDACTED (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[carstenartur]

@copilot Still failing

[Copilot]

@copilot Still failing

The workflow is still failing on master because the PR hasn't been merged yet. Workflows triggered by workflow_run events execute using the workflow file from the default branch (master), not from the PR branch.

The fixes in this PR will only take effect once the PR is merged to master. Until then, the workflows on master will continue using the old, broken configuration that references the external workflow.

To verify the fix works, you'll need to merge this PR to master first.