Can we comment to public repos using fine grained access token

[parteekcoder]

Select Topic Area

Question

Body

I am not able to create comment on pull request using fine grained access token, Can somebody please help me how can I achieve this.

[Gustavonn07]

Hope this helps, I did a search and found this:
To create a comment on a pull request using a fine-grained access token, you can utilize the GitHub API. Here's an example of how you can achieve this using a personal access token (PAT):

Generate a Personal Access Token:

Go to your GitHub account settings.
Navigate to the "Developer settings" section.
Click on "Personal access tokens."
Generate a new token with appropriate permissions (e.g., repo for repository access).
Make an API request:

Use an HTTP library or a tool like cURL to send a POST request to the GitHub API endpoint for creating a comment on a pull request.
Set the "Authorization" header with your personal access token: Authorization: Bearer YOUR_TOKEN.
Specify the required parameters in the request payload, such as the pull request number, repository, and the body of the comment.
Here's an example using cURL:

curl -X POST
-H "Authorization: Bearer YOUR_TOKEN"
-H "Content-Type: application/json"
-d '{
"body": "Your comment here"
}'
https://api.github.com/repos/OWNER/REPO/issues/PULL_REQUEST_NUMBER/comments
Replace YOUR_TOKEN with your personal access token, OWNER with the owner of the repository, REPO with the repository name, and PULL_REQUEST_NUMBER with the number of the pull request you want to comment on.

Make sure you have the necessary permissions to create comments on pull requests in the repository. If you're using a token generated from an account with sufficient access, this shouldn't be an issue.

Remember to handle the API response to check for any errors or validation issues. You can find more information about the GitHub API and specific endpoints in the GitHub Developer documentation (https://docs.github.com/en/rest).

if you just want to make a pull request, fork the repository and click pull request

[parteekcoder]

@Gustavonn07 thanks for the help. Could you please tell me what permissions you allowed?

I will tell you about my case .
I am B repo(in account 2) which is fork of A repo (in account 1) . I want to create comment on A repos PR using fine grained access token of repo B account 2.

And as far as I seen the docs, I found that using token we can't write in public repos. but I am looking out a way to do that

[Gustavonn07]

From what I was seeing to create a comment on a pull request in a public repository, the access token must have the "public_repo" scope. However, note that fine-grained access tokens with the "public_repo" scope have limited functionality and can only perform read operations. This means that you won't be able to create a comment on a pull request using this type of token.

If you have control over the repository in account 1 (A), one possible solution would be to create a GitHub App with the required permissions and install it in both the original repository (A) and the forked repository (B). This way, the GitHub App can have the necessary write access to create comments on pull requests in the original repository.

Alternatively, if the repository in account 1 (A) is private, you can grant the necessary permissions to the access token associated with the forked repository (B) in account 2. This can be done by assigning the access token to a collaborator or by adding it as a member with appropriate permissions to the repository in account 1.

It's important to consider the security implications of granting write access to a public repository, as it could potentially allow unauthorized modifications.

hope it helps.

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬