Failing to checkout private repo

[bobby-driver]

Since yesterday, the checkout action has begun failing on all of our pipelines which check out a private repo. These pipelines have been unchanged for a long time and have always worked. There is another issue for this which was closed yesterday: #983

Here is an example of one of the actions:

jobs:
  test-deploy-helm-eks:
    runs-on: ["self-hosted", "Linux", "dev"]
    name: test-deploy-helm-eks
    steps:
      - uses: actions/checkout@v3

      - name: Checkout shared-github-actions
        uses: actions/checkout@v2.4.1
        with:
          repository: DriverTechnologies/shared-github-actions
          path: ./.github/shared-github-actions
          token: ${{ secrets.ORG_GITHUB_PAT }}

And the error it produces:

Fetching the repository
  /usr/bin/git -c protocol.version=2 fetch --no-tags --prune --progress --no-recurse-submodules --depth=1 origin +f5eb8aae58ad76be5fc80eb1746005c75f27a734:refs/remotes/origin/main
  remote: Repository not found.
  Error: fatal: repository 'https://github.com/DriverTechnologies/shared-github-actions/' not found
  The process '/usr/bin/git' failed with exit code 128
  Waiting 18 seconds before trying again
  /usr/bin/git -c protocol.version=2 fetch --no-tags --prune --progress --no-recurse-submodules --depth=1 origin +f5eb8aae58ad76be5fc80eb17[46](https://github.com/DriverTechnologies/shared-github-actions/actions/runs/3320096420/jobs/5486067011#step:3:51)005c75f27a734:refs/remotes/origin/main
  remote: Repository not found.
  Error: fatal: repository 'https://github.com/DriverTechnologies/shared-github-actions/' not found
  The process '/usr/bin/git' failed with exit code 128
  Waiting 14 seconds before trying again
  /usr/bin/git -c protocol.version=2 fetch --no-tags --prune --progress --no-recurse-submodules --depth=1 origin +f5eb8aae58ad76be5fc80eb1746005c75f27a734:refs/remotes/origin/main
  remote: Repository not found.
  Error: fatal: repository 'https://github.com/DriverTechnologies/shared-github-actions/' not found
  Error: The process '/usr/bin/git' failed with exit code 128

[alexthaii]

What was the resolution?

[kevinbreaker]

I got the same error, does anyone know how to resolve?

[marco-carvalho]

I've managed to resolve this way:

jobs:
  plan:
    permissions:
      contents: read
      pull-requests: write

[AetherUnbound]

FWIW @marco-carvalho's resolution was also ours: we had made permissions explicit in one workflow and that meant that we had to add contents: read in order for the repo to be cloned. Per this doc:

If you specify the access for any of these scopes, all of those that are not specified are set to none.

(this is why it was working before but not after)