My subsequence GitHub action is not being triggered

[albatarnik]

I have a GitHub action that creates a new release using semantic release which works, but the subsequent GitHub action that is meant to trigger when a new release or pre-release is created does not work.

First GitHub action ( create the release ) triggers

name: release 

# Controls when the workflow will run
on:
  workflow_dispatch:
  # Triggers the workflow on push or pull request events but only for the master branch
  push:
    branches:
      - master
      - next
      - beta
      - alpha
jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
        contents: write
        issues: write
        pull-requests: write
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-node@v3
        with:
          node-version: '18.x'
      - run: yarn
      - run: yarn semantic-release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} 

This never triggers, though the release has been created :/

name: building docker test

# Controls when the workflow will run
on:
  release:
    types: [published, prereleased]

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v2

[gr2m]

The problem is

          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} 

Events triggered by GitHub Actions (using secrets.GITHUB_TOKEN) do not trigger further events

When you use the repository's GITHUB_TOKEN to perform tasks, events triggered by the GITHUB_TOKEN, with the exception of workflow_dispatch and repository_dispatch, will not create a new workflow run. This prevents you from accidentally creating recursive workflow runs. For example, if a workflow run pushes code using the repository's GITHUB_TOKEN, a new workflow will not run even when the repository contains a workflow configured to run when push events occur.

https://docs.github.com/en/actions/security-guides/automatic-token-authentication#using-the-github_token-in-a-workflow

[mvrana-cen81948]

I have exactly this issue and i am pretty screwed, because my organization forbids using Personal Access Tokens which is sugested workaround for this issue. Actually my build-publish action listens on push tag, but it's same. My hope was using ssh for communication with repo, so tag should be pushed using ssh instead https and GITHUB_TOKEN, but it not works either. Interesting is that when i do simple git push origin mytag in workflow, it triggers other action, but if it is done by semantic-release, it is not working. I blame semantic-release using GITHUB_TOKEN no mater repo is checked out by ssh...

[gr2m]

register a GitHub App and use https://github.com/actions/create-github-app-token instead. Do not use personal access tokens for automation.