Overwrite organisation-level hostRules for specific repo.

[aamkye]

How are you running Renovate?

A Mend.io-hosted app

Which platform you running Renovate on?

GitHub.com

Which version of Renovate are you using?

43.219.0

Please tell us more about your question or problem

Setting a global config in: https://developer.mend.io/github/<ORG>/-/settings -> Settings -> Credentials -> Host Rules (for a private go package called platform-go); includes those global Credentials and Host Rules in each repo onboarded in the system that uses this package.

But here is the case: the private repo itself is also using the PAT configured in Host Rules and Credentials instead of MendAPP credentials.

Here is a Renovate PR but created by me (using PAT)

instead of renovate[bot] (in a different repo; non platform-go)

Can you please assist me with this issue - how to overwrite this (instead of using Host Rules per repo)?

Logs (if relevant)

Logs

INFO: Renovate started
{
  "renovateVersion": "43.219.0"
}

...

DEBUG: File config
{
  "config": {
    "token": "***********",
    "redisUrl": "rediss://**redacted**@master.developer-platform-bare-metal-prd-auth.aqffol.use1.cache.amazonaws.com:6379",
    "hostRules": [
      {
        "hostType": "docker",
        "matchHost": "docker.io",
        "username": "mdpprod3renovate",
        "password": "***********"
      },
      {
        "hostType": "docker",
        "matchHost": "hub.docker.com",
        "username": "mdpprodrenovatedc2",
        "password": "***********"
      },
      {
        "matchHost": "https://api.github.com/repos/<ORG>/platform-go",
        "hostType": "github",
        "token": "***********"
      }
    ],
    "secrets": {
      "PLATFORM_GO_RO_GH_PAT": "***********"
    }
  }
}

...

DEBUG: Adding token authentication for https://api.github.com/repos/<ORG>/platform-go (hostType=github) to hostRules
DEBUG: Using default github endpoint: https://api.github.com/
DEBUG: Platform config
{
  "platformConfig": {
    "hostType": "github",
    "endpoint": "https://api.github.com/",
    "isGHApp": true,
    "isGhe": false,
    "isGheCloud": false
  },
  "renovateUsername": "renovate[bot]"
}

...

DEBUG: GET https://api.github.com/repos/<ORG>/platform-go/pulls?per_page=20&state=all&sort=updated&direction=desc&page=1 = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=403 retryCount=0, duration=160)

...

WARN: Host error
{
  "hostType": "github",
  "err": {
    "name": "HTTPError",
    "code": "ERR_NON_2XX_3XX_RESPONSE",
    "timings": {
...
      "phases": {
        "wait": 1,
        "dns": 0,
        "tcp": 2,
        "tls": 7,
        "request": 0,
        "firstByte": 158,
        "download": 1,
        "total": 160
      }
    },
    "options": {
      "headers": {
        "user-agent": "Mend-hosted Renovate/43.219.0 (https://**redacted**@mend.io)",
        "accept": "application/json, application/vnd.github.v3+json",
        "authorization": "***********",
        "accept-encoding": "gzip, deflate, br, zstd"
      },
      "url": "https://api.github.com/repos/<ORG>/platform-go/pulls?per_page=20&state=all&sort=updated&direction=desc&page=1",
      "hostType": "github",
      "username": "",
      "password": "",
      "method": "GET",
      "http2": false
    },
    "message": "Request failed with status code 403 (Forbidden): GET https://api.github.com/repos/<ORG>/platform-go/pulls?per_page=20&state=all&sort=updated&direction=desc&page=1",
    "stack": "HTTPError: Request failed with status code 403 (Forbidden): GET https://**redacted**@14.6.6/node_modules/got/dist/source/as-promise/index.js:98:42)\n    at Object.onceWrapper (node:events:631:26)\n    at Request.emit (node:events:521:24)\n    at Request.emit (node:domain:489:12)\n    at Request._onResponseBase (file:///usr/local/renovate/node_modules/.pnpm/got@14.6.6/node_modules/got/dist/source/core/index.js:779:22)\n    at processTicksAndRejections (node:internal/process/task_queues:104:5)\n    at Request._onResponse (file:///usr/local/renovate/node_modules/.pnpm/got@14.6.6/node_modules/got/dist/source/core/index.js:829:13)",
    "response": {
      "statusCode": 403,
      "statusMessage": "Forbidden",
      "body": {
        "message": "Resource not accessible by personal access token",
        "documentation_url": "https://docs.github.com/rest/pulls/pulls#list-pull-requests",
        "status": "403"
      },
      "headers": {
...
      },
      "httpVersion": "1.1",
      "retryCount": 0
    }
  }
}

INFO: External host error causing abort - skipping