Dependabot PRs all failing with a 401 bad credentials error

[gregory-j-baker]

I've configured merge-gatekeeper in a github action and gave it repo access.. it works great for all of my team's PRs, but the dependabot ones fail with the following error message:

Run upsidr/merge-gatekeeper@v1
  with:
    self: merge-gatekeeper
    interval: 5
    timeout: 600
    ref: 9cb9cf009688e8e89063785eb3ec74e86eb08c40
/usr/bin/docker run --name c2716642e5d41a49b4e2cb2841a4206d4e60e_365953 --label 6c2716 --workdir /github/workspace --rm -e "INPUT_TOKEN" -e "INPUT_SELF" -e "INPUT_INTERVAL" -e "INPUT_TIMEOUT" -e "INPUT_IGNORED" -e "INPUT_REF" -e "HOME" -e "GITHUB_JOB" -e "GITHUB_REF" -e "GITHUB_SHA" -e "GITHUB_REPOSITORY" -e "GITHUB_REPOSITORY_OWNER" -e "GITHUB_REPOSITORY_OWNER_ID" -e "GITHUB_RUN_ID" -e "GITHUB_RUN_NUMBER" -e "GITHUB_RETENTION_DAYS" -e "GITHUB_RUN_ATTEMPT" -e "GITHUB_REPOSITORY_ID" -e "GITHUB_ACTOR_ID" -e "GITHUB_ACTOR" -e "GITHUB_TRIGGERING_ACTOR" -e "GITHUB_WORKFLOW" -e "GITHUB_HEAD_REF" -e "GITHUB_BASE_REF" -e "GITHUB_EVENT_NAME" -e "GITHUB_SERVER_URL" -e "GITHUB_API_URL" -e "GITHUB_GRAPHQL_URL" -e "GITHUB_REF_NAME" -e "GITHUB_REF_PROTECTED" -e "GITHUB_REF_TYPE" -e "GITHUB_WORKFLOW_REF" -e "GITHUB_WORKFLOW_SHA" -e "GITHUB_WORKSPACE" -e "GITHUB_ACTION" -e "GITHUB_EVENT_PATH" -e "GITHUB_ACTION_REPOSITORY" -e "GITHUB_ACTION_REF" -e "GITHUB_PATH" -e "GITHUB_ENV" -e "GITHUB_STEP_SUMMARY" -e "GITHUB_STATE" -e "GITHUB_OUTPUT" -e "RUNNER_OS" -e "RUNNER_ARCH" -e "RUNNER_NAME" -e "RUNNER_ENVIRONMENT" -e "RUNNER_TOOL_CACHE" -e "RUNNER_TEMP" -e "RUNNER_WORKSPACE" -e "ACTIONS_RUNTIME_URL" -e "ACTIONS_RUNTIME_TOKEN" -e "ACTIONS_CACHE_URL" -e "ACTIONS_RESULTS_URL" -e GITHUB_ACTIONS=true -e CI=true -v "/var/run/docker.sock":"/var/run/docker.sock" -v "/home/runner/work/_temp/_github_home":"/github/home" -v "/home/runner/work/_temp/_github_workflow":"/github/workflow" -v "/home/runner/work/_temp/_runner_file_commands":"/github/file_commands" -v "/home/runner/work/{REPO}/{REPO}":"/github/workspace" 6c2716:642e5d41a49b4e2cb2841a4206d4e60e  "validate" "--token=" "--self=merge-gatekeeper" "--interval=5" "--ref=9cb9cf009688e8e89063785eb3ec74e86eb08c40" "--timeout=600" "--ignored="
Start processing validator: merge-gatekeeper....
Finish validator: merge-gatekeeper processing.
Error: validation failed, err: GET https://api.github.com/repos/{ORG}/{REPO}/commits/9cb9cf009688e8e89063785eb3ec74e86eb08c40/status?page=1&per_page=100: 401 Bad credentials []
failed to execute command: validation failed, err: GET https://api.github.com/repos/{ORG}/{REPO}/commits/9cb9cf009688e8e89063785eb3ec74e86eb08c40/status?page=1&per_page=100: 401 Bad credentials []

I'm not really sure where to start to troubleshoot. Oddly enough, I can curl (GET) the github api url in the error message without any credentials.

[uncledru]

dependabot cannot access repo secrets - token: ${{ secrets.GITHUB_TOKEN }}

see: dependabot/dependabot-core#3253

[gregory-j-baker]

Maybe.. but it worked fine for a few days and then just stopped, with no changes on my end. I'm no longer using this plugin so feel free to close this issue.