Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings
Discussion options

Select Topic Area

Bug

Body

When trying to create a release from a GitHub action job via a step like this:

steps:
  - name: test release
    env:
      GH_REPO: ${{ github.repository }}
      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    run: gh release create test --title test --notes test

It fails for repos newly created today, while the very same action works as expected on pre-existing repos created in the past.
For freshly created repos it fails with:

HTTP 422: Validation Failed (https://api.github.com/repos/gardenlinux/glowing-octo-funicular/releases)
author_id does not have push access to gardenlinux/glowing-octo-funicular

Despite the permissions of the GITHUB_TOKEN looking alright and it having Contents: write:

GITHUB_TOKEN Permissions
  Actions: write
  ArtifactMetadata: write
  Attestations: write
  Checks: write
  Contents: write
  Deployments: write
  Discussions: write
  Issues: write
  Metadata: read
  Models: read
  Packages: write
  Pages: write
  PullRequests: write
  RepositoryProjects: write
  SecurityEvents: write
  Statuses: write

Example:

Looking through the repo settings of both I cannot spot any differences in permissions or similar.

Performing the release creation manually via PAT or the UI works as expected for both types of repos, only publishing a release with the GITHUB_TOKEN appears to be effected.

You must be logged in to vote

The issue is now fixed.

Replies: 4 comments · 8 replies

Comment options

💬 Your Product Feedback Has Been Submitted 🎉

Thank you for taking the time to share your insights with us! Your feedback is invaluable as we build a better GitHub experience for all our users.

Here's what you can expect moving forward ⏩

  • Your input will be carefully reviewed and cataloged by members of our product teams. 
    • Due to the high volume of submissions, we may not always be able to provide individual responses.
    • Rest assured, your feedback will help chart our course for product improvements.
  • Other users may engage with your post, sharing their own perspectives or experiences. 
  • GitHub staff may reach out for further clarification or insight. 
    • We may 'Answer' your discussion if there is a current solution, workaround, or roadmap/changelog post related to the feedback.

Where to look to see what's shipping 👀

  • Read the Changelog for real-time updates on the latest GitHub features, enhancements, and calls for feedback.
  • Explore our Product Roadmap, which details upcoming major releases and initiatives.

What you can do in the meantime 💻

  • Upvote and comment on other user feedback Discussions that resonate with you.
  • Add more information at any point! Useful details include: use cases, relevant labels, desired outcomes, and any accompanying screenshots.

As a member of the GitHub community, your participation is essential. While we can't promise that every suggestion will be implemented, we want to emphasize that your feedback is instrumental in guiding our decisions and priorities.

Thank you once again for your contribution to making GitHub even better! We're grateful for your ongoing support and collaboration in shaping the future of our platform. ⭐

You must be logged in to vote
0 replies
Comment options

This is a duplicate of this discussion

It first came up as an issue within the GITHUB_TOKEN in actions, but also appears to not work in the cli.
Also to note that some older repos are also affected, so its not a problem purely about today. Although in my case it appeared in an older repo for me when i created a new action today 🤔. Maybe it has to do with new actions not being granted the right permissions? Idk if that makes sense

You must be logged in to vote
1 reply
@jairoperezaquino
Comment options

This also affected an old repo of mine where I was trying to add CI/CD for the first time.

Comment options

Hey Friend 👋
This is actually a known behavior — here's what’s happening and a simple fix.

What’s Going On?

  • For new repositories, GitHub now defaults the GITHUB_TOKEN to read-only access for contents.
  • That means even if your workflow asks for contents: write, the token might not actually have that permission unless the repo settings are adjusted.
  • Without that write access, trying to create a release fails with the “author_id does not have push access” error.

✅ How to Fix It?

  1. Go to your repo settings → Actions → General
  2. Under Workflow permissions, set it to “Read and write” for the GITHUB_TOKEN.
  3. In your workflow YAML, add:
permissions:
  contents: write
  1. Then run your release step again — it should work now.

If you do that, the gh release create ... command in your action should be able to push the release without the 422 error.

You must be logged in to vote
5 replies
@xworld21
Comment options

My just created repository already has 'Read and write' permissions under settings -> Actions -> General, but I still cannot run the 'gh release create', even though I am using a workflow that has worked flawlessly in other repositories up until yesterday.

@artem-zinnatullin
Comment options

Same as @xworld21, fresh repo created today, Read and Write permissions, permissions block on the job, still gh release create fails.

This needs to be fixed on GitHub side, gladly ChatGPT was able to find this report, I was losing my mind comparing settings and pipelines between repos that I know have working releases and new repo.

image
@cryi
Comment options

Same issue here. New repo. 😞

@chbornman
Comment options

same issue as well on a repo created today. I set write permissions on the GitHub settings page and added "permissions: contents: write" in the yaml config

@Roman86
Comment options

same problem. It works in another repo, but fails in the older one. The same workflow code, same repo permissions, no secrets/variables/tokens. Copilot couldn't solve it. The only finding we made:

=== Authenticated (GITHUB_TOKEN) ===
{
  "login": null,
  "id": null
}
=== Authenticated (RELEASE_TOKEN) ===
RELEASE_TOKEN not set

full results: https://github.com/Roman86/react-combo-provider/actions/runs/19688167297/workflow

What's interesting that another workflow (different github action) succeeded in the same repo:
https://github.com/Roman86/react-combo-provider/actions/runs/19687213501/workflow

UPDATE: the service is fixed the next day

Comment options

The issue is now fixed.

You must be logged in to vote
2 replies
@Roman86
Comment options

I'm confirming. Re-running the same failed job works just fine now

@nkraetzschmar
Comment options

yep, can confirm everything works as expected again 🎉

Answer selected by nkraetzschmar
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug GitHub or a GitHub feature is not working as intended API and Webhooks Discussions related to GitHub's APIs or Webhooks
10 participants
Morty Proxy This is a proxified and sanitized view of the page, visit original site.