發布 nuget package 到 GitHub 包時禁止 GITHUB_TOKEN 403

Question

我按照這些資源設置了一個 GitHub Actions 工作流程來構建、測試和發布一個 do.net 庫到 GitHub 包：

• 使用 NuGet 注冊表
• 使用 GitHub 操作的 NuGet package 工作流
• 發布一個 NuGet package 到 GitHub 包

這些文章真的很有幫助，但是我遇到了一個他們都沒有討論過的問題：

將 MagicLibrary.0.1.3.nupkg 推送到“https://nuget.pkg.github.com/vivere-dally”... PUT https://nuget.pkg.github.com/vivere-dally/警告：您的請求無法通過 GitHub 包服務進行身份驗證。 請確保您的訪問令牌有效並且配置了適當的范圍。 Forbidden https://nuget.pkg.github.com/vivere-dally/ 218ms 錯誤：響應狀態碼不表示成功：403（禁止）。

這是我的工作流程文件：

# This workflow will build a .NET project
# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-net

name: Release

on:
  push:
    tags:
    - "v[0-9]+.[0-9]+.[0-9]+"

jobs:
  build:

    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v3

    - name: Verify commit exists in origin/main
      run: |
        git fetch --no-tags --prune --depth=1 origin +refs/heads/*:refs/remotes/origin/*
        git branch --remote --contains | grep origin/main
    
    - name: Set VERSION env var from tag
      run: echo "VERSION=${GITHUB_REF/refs\/tags\/v/}" >> $GITHUB_ENV
    

    - name: Setup .NET
      uses: actions/setup-dotnet@v3
      with:
        dotnet-version: 6.0.x

    - name: Restore dependencies
      run: dotnet restore
      working-directory: ./MagicLibrary

    - name: Build
      run: dotnet build --configuration Release /p:Version=${VERSION} --no-restore
      working-directory: ./MagicLibrary

    - name: Test
      run: dotnet test --configuration Release /p:Version=${VERSION} --no-build --verbosity normal
      working-directory: ./MagicLibrary

    - name: Pack
      run: dotnet pack --configuration Release /p:Version=${VERSION} --no-build --output .
      working-directory: ./MagicLibrary

    - name: Push
      run: dotnet nuget push MagicLibrary.${VERSION}.nupkg --source "https://nuget.pkg.github.com/vivere-dally/index.json" --api-key ${{ secrets.GITHUB_TOKEN }}
      working-directory: ./MagicLibrary

為什么GITHUB_TOKEN沒有所需的權限？

Answer 1

默認情況下，GITHUB_TOKEN 不包含發布 package 所需的權限。將以下內容添加到您的作業中：

  permissions:
    packages: write

請參閱https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-nuget-registry#authenticating-in-a-github-actions-workflow

和https://docs.github.com/en/actions/security-guides/automatic-token-authentication#using-the-github_token-in-a-workflow