Try

Author: yoanm

.github/actions/reports-group/attach-check-run-to-triggering-workflow-action/dist/index.js

@@ -31,20 +31,25 @@ async function run() {
                 conclusion: undefinedIfEmpty(checkConclusion),
                 started_at: undefinedIfEmpty(startedAt),
                 completed_at: undefinedIfEmpty(completedAt),
-                owner: repoOwner,
-                repo: repoName
             };
             if (!isEmpty(outputTitle) || !isEmpty(outputSummary)) {
                 res.output = {title: undefinedIfEmpty(outputTitle), summary: undefinedIfEmpty(outputSummary)};
             }
+
+            return res;
         }
     );
     core.debug('API params=' + JSON.stringify(requestParams));
 
     const apiResponse = await core.group('Call API', async () => {
         const octokit = github.getOctokit(githubToken);
 
-        return octokit.request('POST /repos/{owner}/{repo}/check-runs', requestParams);
+        // @TODO Move back to `octokit.rest.checks.create()`
+        const res = await octokit.request('POST /repos/' + repoOwner+ '/' + repoName + '/check-runs', requestParams);
+
+        core.info('TMP DEBUG0 ' + JSON.stringify(res));
+
+        return res;
     });
     core.info('TMP DEBUG' + JSON.stringify(apiResponse));
 

.github/actions/reports-group/attach-check-run-to-triggering-workflow-action/dist/index.js.map

@@ -47,7 +47,7 @@ runs:
               })
           );
 
-    # @TODO move reports-group/load-metadata action to a dedicated repo and remove the checkout
+    # @TODO move actions to a dedicated repo and remove the checkout
     - uses: actions/checkout@v4
       with:
         path: custom-action-repo

.github/actions/reports-group/attach-check-run-to-triggering-workflow-action/index.js

@@ -91,7 +91,7 @@ runs:
               })
           );
 
-    # @TODO move reports-group/load-metadata action to a dedicated repo and remove the checkout
+    # @TODO move actions to a dedicated repo and remove the checkout
     - uses: actions/checkout@v4
       with:
         path: custom-action-repo

.github/actions/reports-group/codacy-uploader/action.yml

@@ -242,6 +242,9 @@ jobs:
     uses: ./.github/workflows/codacy-upload-from-artifacts.yml
     with:
       artifacts-pattern: coverage-groups-*
+    permissions:
+      contents: read
+      checks: write # For the check run creation !
     secrets:
       PROJECT_TOKEN: ${{ secrets.CODACY_PROJECT_TOKEN }}
 
@@ -251,6 +254,9 @@ jobs:
     uses: ./.github/workflows/codecov-upload-from-artifacts.yml
     with:
       artifacts-pattern: coverage-groups-*
+    permissions:
+      contents: read
+      checks: write # For the check run creation !
     secrets:
       TOKEN: ${{ secrets.CODECOV_TOKEN }}
 

.github/actions/reports-group/codecov-uploader/action.yml

@@ -36,6 +36,9 @@ jobs:
     outputs:
       groups: ${{ steps.upload.outputs.groups }}
       reports: ${{ steps.upload.outputs.reports }}
+    permissions:
+      contents: read
+      checks: write # For the check run creation !
     steps:
       # @TODO move actions to a dedicated repo and remove the checkout
       - uses: actions/checkout@v4

.github/workflows/CI.yml

@@ -28,8 +28,11 @@ jobs:
     outputs:
       matrix: ${{ steps.build-matrix.outputs.matrix }}
       list-for-output: ${{ steps.find-groups.outputs.list }}
+    permissions:
+      contents: read
+      checks: write # For the check run creation !
     steps:
-      # @TODO move reports-group/load-metadata action to a dedicated repo and remove the checkout
+      # @TODO move actions to a dedicated repo and remove the checkout
       - uses: actions/checkout@v4
         with:
           path: custom-action-repo
@@ -104,6 +107,9 @@ jobs:
       fail-fast: true
       max-parallel: 4
       matrix: ${{ fromJson(needs.prepare.outputs.matrix) }}
+    permissions:
+      contents: read
+      checks: write # For the check run creation !
     steps:
       - name: DEBUG matrix
         run: echo 'matrix='"'"'${{ toJson(matrix) }}'"'"
@@ -113,7 +119,12 @@ jobs:
       - name: Checkout Repository
         uses: actions/checkout@v4
 
-      - uses: ./.github/actions/reports-group/attach-check-run-to-triggering-workflow-action
+      # @TODO move actions to a dedicated repo and remove the checkout
+      - uses: actions/checkout@v4
+        with:
+          path: custom-action-repo
+
+      - uses: ./custom-action-repo/.github/actions/reports-group/attach-check-run-to-triggering-workflow-action
         with:
           name: "${{ github.workflow }} (${{ github.event.workflow.name}}) / Codecov / ${{ matrix.artifact}} - ${{ matrix.path }}"
           commit-sha: "${{ ('workflow_run' == github.event_name && ('pull_request' == github.event.workflow_run.event || 'push' == github.event.workflow_run.event) && github.event.workflow_run.head_sha) || ('pull_request' == github.event_name && github.event.pull_request.head.sha) || ('push' == github.event_name && github.sha) || null }}"
@@ -133,10 +144,9 @@ jobs:
           ls -ail job-artifact/*
           ls -ail job-artifact/*/*
 
-      # @TODO move reports-group/codecov-uploader action to a dedicated repo and remove the checkout
       - name: Upload reports
         id: upload
-        uses: ./.github/actions/reports-group/codecov-uploader
+        uses: ./custom-action-repo/.github/actions/reports-group/codecov-uploader
         with:
           path: job-artifact/${{ matrix.path }}
           token: ${{ secrets.TOKEN }}

.github/workflows/codacy-upload-from-artifacts.yml

@@ -12,6 +12,9 @@ jobs:
     with:
       artifacts-pattern: coverage-groups-*
       run-id: ${{ github.event.workflow_run.id }}
+    permissions:
+      contents: read
+      checks: write # For the check run creation !
     secrets:
       PROJECT_TOKEN: ${{ secrets.CODACY_PROJECT_TOKEN }}
 
@@ -22,6 +25,9 @@ jobs:
     with:
       artifacts-pattern: coverage-groups-*
       run-id: ${{ github.event.workflow_run.id }}
+    permissions:
+      contents: read
+      checks: write # For the check run creation !
     secrets:
       TOKEN: ${{ secrets.CODECOV_TOKEN }}