EGITNOPERMISSION error, Failed step "fail" of plugin "@semantic-release/github"

[ujjwal-ibm]

Current behavior

Getting this error :

✖  Failed step "fail" of plugin "@semantic-release/github"

[4:27:48 AM] [semantic-release] › ✖  EGHNOPERMISSION The GitHub token doesn't allow to push on the repository repository_address.

The user associated with the GitHub token (https://github.com/semantic-release/github/blob/master/README.md#github-authentication) configured in the GH_TOKEN or GITHUB_TOKEN environment variable must allows to push to the repository repository_address.

Please make sure the GitHub user associated with the token is an owner (https://help.github.com/articles/permission-levels-for-a-user-account-repository/#owner-access-on-a-repository-owned-by-a-user-account) or a collaborator (https://help.github.com/articles/permission-levels-for-a-user-account-repository/#collaborator-access-on-a-repository-owned-by-a-user-account) if the reposotory belong to a user account or has write permissions (https://help.github.com/articles/managing-team-access-to-an-organization-repository) if the repository belongs to an organization (https://help.github.com/articles/repository-permission-levels-for-an-organization).

[4:27:48 AM] [semantic-release] › ✖  EGITNOPERMISSION Cannot push to the Git repository.

semantic-release cannot push the version tag to the branch master on the remote Git repository with URL https://[secure]@github.com/repository_address

This can be caused by:

    * a misconfiguration of the repositoryUrl (https://github.com/semantic-release/semantic-release/blob/master/docs/usage/configuration.md#repositoryurl) option

    * the repository being unavailable

    * or missing push permission for the user configured via the Git credentials on your CI environment (https://github.com/semantic-release/semantic-release/blob/master/docs/usage/ci-configuration.md#authentication)

SemanticReleaseError: Cannot push to the Git repository.

    at module.exports (/home/travis/.npm/_npx/6581/lib/node_modules/semantic-release/lib/get-error.js:6:10)

    at run (/home/travis/.npm/_npx/6581/lib/node_modules/semantic-release/index.js:98:11)

    at processTicksAndRejections (internal/process/task_queues.js:95:5)

    at async module.exports (/home/travis/.npm/_npx/6581/lib/node_modules/semantic-release/index.js:269:22)

    at async module.exports (/home/travis/.npm/_npx/6581/lib/node_modules/semantic-release/cli.js:55:5) {

  code: 'EGITNOPERMISSION',

  details: '**semantic-release** cannot push the version tag to the branch `master` on the remote Git repository with URL `https://[secure]@github.com/repository_address`.\n' +

    '\n' +

    'This can be caused by:\n' +

    ' - a misconfiguration of the [repositoryUrl](https://github.com/semantic-release/semantic-release/blob/master/docs/usage/configuration.md#repositoryurl) option\n' +

    ' - the repository being unavailable\n' +

    ' - or missing push permission for the user configured via the [Git credentials on your CI environment](https://github.com/semantic-release/semantic-release/blob/master/docs/usage/ci-configuration.md#authentication)',

  semanticRelease: true

}The command "npx semantic-release" exited with 1.

Expected behavior

It should release successfully.
semantic-release version :

semantic-release version

Running semantic-release version 19.0.5

CI environment

semantic-release/github

Plugins used

install:
        - sudo apt-get install python
        - nvm install v14.17.0
        - npm install -g npm@6.x
        - pip install --user bump2version
        - npm install @semantic-release/changelog
        - npm install @semantic-release/exec
        - npm install @semantic-release/git
        - npm install @semantic-release/github
      script:
        - npx semantic-release

semantic-release configuration

    - stage: Semantic-Release
      install:
        - sudo apt-get install python
        - nvm install v14.17.0
        - npm install -g npm@6.x
        - pip install --user bump2version
        - npm install @semantic-release/changelog
        - npm install @semantic-release/exec
        - npm install @semantic-release/git
        - npm install @semantic-release/github
      script:
        - npx semantic-release
      after_success:
        - echo "Semantic release has successfully created a new tagged-release"

CI logs

$ npx semantic-release

npx: installed 524 in 17.611s

[4:27:42 AM] [semantic-release] › ℹ  Running semantic-release version 19.0.5

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "verifyConditions" from "@semantic-release/changelog"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "verifyConditions" from "@semantic-release/exec"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "verifyConditions" from "@semantic-release/git"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "verifyConditions" from "@semantic-release/github"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "analyzeCommits" from "@semantic-release/commit-analyzer"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "analyzeCommits" from "@semantic-release/exec"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "verifyRelease" from "@semantic-release/exec"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "generateNotes" from "@semantic-release/release-notes-generator"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "generateNotes" from "@semantic-release/exec"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "prepare" from "@semantic-release/changelog"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "prepare" from "@semantic-release/exec"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "prepare" from "@semantic-release/git"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "publish" from "@semantic-release/exec"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "publish" from "@semantic-release/github"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "addChannel" from "@semantic-release/exec"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "addChannel" from "@semantic-release/github"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "success" from "@semantic-release/exec"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "success" from "@semantic-release/github"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "fail" from "@semantic-release/exec"

[4:27:42 AM] [semantic-release] › ✔  Loaded plugin "fail" from "@semantic-release/github"

[4:27:45 AM] [semantic-release] › ✔  Run automated release from branch master on repository https://github.com/repository_address

[4:27:46 AM] [semantic-release] › ✖  The command "git push --dry-run --no-verify https://[secure]@github.com/repository_address HEAD:master" failed with the error message remote: Permission to repository_address denied to user

fatal: unable to access 'https://github.com/repository_address': The requested URL returned error: 403.

[4:27:46 AM] [semantic-release] › ℹ  Start step "fail" of plugin "@semantic-release/exec"

[4:27:46 AM] [semantic-release] › ✔  Completed step "fail" of plugin "@semantic-release/exec"

[4:27:46 AM] [semantic-release] › ℹ  Start step "fail" of plugin "@semantic-release/github"

[4:27:46 AM] [semantic-release] [@semantic-release/github] › ℹ  Verify GitHub authentication

[4:27:48 AM] [semantic-release] › ✖  Failed step "fail" of plugin "@semantic-release/github"

[4:27:48 AM] [semantic-release] › ✖  EGHNOPERMISSION The GitHub token doesn't allow to push on the repository repository_address.

The user associated with the GitHub token (https://github.com/semantic-release/github/blob/master/README.md#github-authentication) configured in the GH_TOKEN or GITHUB_TOKEN environment variable must allows to push to the repository repository_address.

Please make sure the GitHub user associated with the token is an owner (https://help.github.com/articles/permission-levels-for-a-user-account-repository/#owner-access-on-a-repository-owned-by-a-user-account) or a collaborator (https://help.github.com/articles/permission-levels-for-a-user-account-repository/#collaborator-access-on-a-repository-owned-by-a-user-account) if the reposotory belong to a user account or has write permissions (https://help.github.com/articles/managing-team-access-to-an-organization-repository) if the repository belongs to an organization (https://help.github.com/articles/repository-permission-levels-for-an-organization).

[4:27:48 AM] [semantic-release] › ✖  EGITNOPERMISSION Cannot push to the Git repository.

semantic-release cannot push the version tag to the branch master on the remote Git repository with URL https://[secure]@github.com/Irepository_address.
This can be caused by:

    * a misconfiguration of the repositoryUrl (https://github.com/semantic-release/semantic-release/blob/master/docs/usage/configuration.md#repositoryurl) option

    * the repository being unavailable

    * or missing push permission for the user configured via the Git credentials on your CI environment (https://github.com/semantic-release/semantic-release/blob/master/docs/usage/ci-configuration.md#authentication)

SemanticReleaseError: Cannot push to the Git repository.

    at module.exports (/home/travis/.npm/_npx/6581/lib/node_modules/semantic-release/lib/get-error.js:6:10)

    at run (/home/travis/.npm/_npx/6581/lib/node_modules/semantic-release/index.js:98:11)

    at processTicksAndRejections (internal/process/task_queues.js:95:5)

    at async module.exports (/home/travis/.npm/_npx/6581/lib/node_modules/semantic-release/index.js:269:22)

    at async module.exports (/home/travis/.npm/_npx/6581/lib/node_modules/semantic-release/cli.js:55:5) {

  code: 'EGITNOPERMISSION',

  details: '**semantic-release** cannot push the version tag to the branch `master` on the remote Git repository with URL `https://[secure]@github.com/repository_address`.\n' +

    '\n' +

    'This can be caused by:\n' +

    ' - a misconfiguration of the [repositoryUrl](https://github.com/semantic-release/semantic-release/blob/master/docs/usage/configuration.md#repositoryurl) option\n' +

    ' - the repository being unavailable\n' +

    ' - or missing push permission for the user configured via the [Git credentials on your CI environment](https://github.com/semantic-release/semantic-release/blob/master/docs/usage/ci-configuration.md#authentication)',

  semanticRelease: true

}

The command "npx semantic-release" exited with 1.
cache.2

store build cache

Done. Your build exited with 1.

[travi]

the error seems to be quite clear about what the problem is. are you suggesting that you think the error is incorrect? if so, what gives you confidence that the error is incorrect?

[ujjwal-ibm]

the token has no expiration date, read and write workflow permissions is there for the github token

[travi]

this is not a problem with semantic-release. either you are mistaken about the permissions, branch protection requiring higher permissions than you realize, or something in your build process providing the incorrect token to semantic-release. please re-check these details

[kieranroneill]

For those that find this and are trying to find an answer, my problem was that I didn't have workflow permissions set to write (they were read by default).

I was using a personal access token (PAT) and NOT the workflow GITHUB_TOKEN. My assumption is that the above settings are overwritten/ignored when you explicitly set write permissions in the workflow yaml file.