Skip to content

fix(action): Handle permission errors when updating publish issues#744

Merged
BYK merged 1 commit intomasterfrom
fix/publish-issue-update-permission
Feb 6, 2026
Merged

fix(action): Handle permission errors when updating publish issues#744
BYK merged 1 commit intomasterfrom
fix/publish-issue-update-permission

Conversation

@BYK
Copy link
Member

@BYK BYK commented Feb 6, 2026

Summary

Fixes release workflow failure when the GitHub App token doesn't have permission to update issues in the publish repo.

Problem

The release workflow failed with:

failed to update https://github.com/getsentry/publish/issues/7083: GraphQL: Resource not accessible by integration (updateIssue)

The sentry-release-bot GitHub App can create issues in getsentry/publish but cannot update them.

Solution

Handle the permission error gracefully:

  • Try to update the existing issue
  • If it fails (permission denied), emit a warning and continue with the existing issue URL
  • The workflow no longer fails due to this permission issue

Related

The GitHub App token may not have permission to update issues in the
publish repo (getsentry/publish). Handle this gracefully by catching
the error and continuing with the existing issue URL instead of failing
the entire release workflow.
Copy link
Contributor

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.

if gh issue edit "$existing_issue_number" -R "$PUBLISH_REPO" --body "$body" 2>/dev/null; then
echo "::notice::Updated existing publish request: ${existing_issue_url}"
else
echo "::warning::Could not update existing issue (permission denied). Using existing issue as-is."
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All errors silently treated as permission errors

Medium Severity

The gh issue edit command's stderr is redirected to /dev/null, suppressing all error output, while the warning message assumes any failure is due to "permission denied". The command could fail for many other reasons (network issues, rate limiting, expired token, deleted issue, etc.), but the actual error is lost and a misleading message is shown instead. This makes debugging difficult when non-permission errors occur.

Fix in Cursor Fix in Web

@BYK BYK merged commit 5037190 into master Feb 6, 2026
16 checks passed
@BYK BYK deleted the fix/publish-issue-update-permission branch February 6, 2026 18:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant