Use `GITHUB_TOKEN` instead of `ACCESS_TOKEN`

[gerardabello]

Describe the solution you'd like

The action should use GITHUB_TOKEN instead of a user-provided ACCESS_TOKEN

Additional Comments

It's much easier (it's already provided if you just enable a check) and safer for public repos, as the GITHUB_TOKEN is scoped to the repo and not to all your repos like a personal access token.

https://developer.github.com/actions/managing-workflows/storing-secrets/#github-token-secret

[JamesIves]

I’d love to, and originally the action was, but unfortunately there’s an issue with the Github secret provided with actions that prevents Github Pages from rebuilding your site with it, that means that you’ll be able to commit to the branch, but it will never update. It works for private repostitories, but not public ones.

I’m keeping an eye on the situation and will test this again when actions leaves beta. For now I’d suggest limiting the permissions on the PAT you create if you’d like to use the action!

[JamesIves]

I've recently emailed GitHub support, I'll let you know if I hear back!

[JamesIves]

Following up on this @gerardabello - here's the response I've received from GitHub's developer support.

After speaking with the team about this, they let me know that server-to-server requests won't kick off a page build, whether it's creating a commit or explicitly requesting a page build.

As you've observed, user-to-user server requests (using a personal access token or an OAuth token) can build a Pages project via push or requesting a page build because they're linked to a specific user account.

I see how it would be useful to open this functionality to GitHub Actions, so I've let the team know about this internally.

I've also provided GitHub with some additional information about the private repository behavior I mentioned in my initial post. I'll let you know if I hear anything more.

[JamesIves]

Still no updates from GitHub on this. I've emailed them twice now with no reply.

[alex-page]

Some additional context here: maxheld83/ghpages#1

[JamesIves]

Thanks @alex-page!

[alex-page]

Oops that issue only has a bit of context, check the PR out maxheld83/ghpages#18

[JamesIves]

I'll keep an eye on this. Doesn't seem possible just yet.

[JamesIves]

Hoping to have a fix for this today.