From ce0d8b898bfc4c0d8051c7940da4988f2ce822f9 Mon Sep 17 00:00:00 2001 From: jbalonso Date: Wed, 30 Oct 2024 22:27:35 +0000 Subject: [PATCH] Document missing "packages" scope feature for GITEA_TOKEN (#77) As per https://github.com/go-gitea/gitea/issues/23642#issuecomment-2119876692, this documents a missing feature for `GITEA_TOKEN` authorizing access to the package repository. Co-authored-by: Lunny Xiao Reviewed-on: https://gitea.com/gitea/docs/pulls/77 Reviewed-by: Lunny Xiao Co-authored-by: jbalonso Co-committed-by: jbalonso --- docs/usage/actions/comparison.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/usage/actions/comparison.md b/docs/usage/actions/comparison.md index 1f69fc76..b4f69314 100644 --- a/docs/usage/actions/comparison.md +++ b/docs/usage/actions/comparison.md @@ -80,6 +80,12 @@ As a workaround, you can use [go-hashfiles](https://gitea.com/actions/go-hashfil ## Missing features +### Package repository authorization + +The `GITEA_TOKEN` for a job running within a repository should be able to publish to the associated package repository (i.e. to upload OCI images). See the "packages" scope for the "default access" in [Automatic token authentication](https://docs.github.com/en/actions/security-for-github-actions/security-guides/automatic-token-authentication#permissions-for-the-github_token). + +This is not implemented in Gitea Actions now. A workaround for Gitea Actions is to use a Personal Access Token (PAT). See this [github issue and comment](https://github.com/go-gitea/gitea/issues/23642#issuecomment-2119876692) for tracking this feature. + ### Problem Matchers Problem Matchers are a way to scan the output of actions for a specified regex pattern and surface that information prominently in the UI.