Permission Error 403 - Unable to push image despite login to ghcr.io is succeeded

[areebemumba]

Select Topic Area

Bug

Body

github.action.yml

name: Build and Push Freeradius proxy
on:
  push:
    branches:
      - '*'
jobs:
  build-and-push:
    runs-on: ubuntu-latest
    permissions:
      packages: write
    steps:
      - name: Checkout Code
        uses: actions/checkout@v2
        with:
          token: ${{ secrets.GCR_TOKEN}}
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@79abd3f86f79a9d68a23c75a09a9a85889262adf
      - name: Login to GHCR
        uses: docker/login-action@28218f9b04b4f3f62068d7b6ce6ca5b26e35336c
        with:
          registry: ghcr.io
          username: ${{ secrets.REPO_OWNER }}
          password: ${{ secrets.GCR_TOKEN }}
      - name: Build and Push Docker Image
        uses: docker/build-push-action@ac9327eae2b366085ac7f6a2d02df8aa8ead720a
        with:
          context: .
          push: true
          tags: ghcr.io/${{ github.repository }}:${{ github.sha }}

Error:

Error: buildx failed with: ERROR: failed to solve: failed to push ghcr.io/ORG-NAME/REPO-NAME:74dee872822195355126eb34c850acbc0c999f9db: unexpected status: 403 Forbidden

[fugkco]

I'm having the same issue, see example run: https://github.com/fugkco/jackett/actions/runs/4612846948/jobs/8154220292

Oh! @areebemumba have you enabled write permissions in the repo settings (Settings > Actions > General > Workflow permissions)?

[queenofcorgis]

Thanks for posting in the GitHub Community, @areebemumba !

We're happy you're here. You are more likely to get a useful response if you are posting your question in the applicable category, the Issues category is solely related to conversations around the GitHub products Issues and Projects. I've gone ahead and moved it for you. Good luck!

[sudomateo]

For those that struggled with this like I did. You have to go into the package settings itself and grant the repository running the GitHub Actions workflow access to the package before secrets.GITHUB_TOKEN will work.

[yx-altera]

@sudomateo How to access this "manage actions access" page? I couldn't find it anywhere on the page.

[sudomateo]

@sudomateo How to access this "manage actions access" page? I couldn't find it anywhere on the page.

https://github.com/USERNAME?tab=packages

Click on the package you want to change the settings of.

Click Package settings on the right side.