[GH Request] GH token scope for ecommerce worker

[christopappas]

Firm Name

2U

Urgency

Medium (< 2 weeks)

Problem/Request

Hi there,

There is a python upgrade requirements github action that's been failing for quite some time now for ecommerce-worker: https://github.com/openedx/ecommerce-worker/actions/runs/6300862336/job/17104602150

We done some debugging, but we believe this may be related to token scope (because we can copy the exact same code for a python upgrade GHA that is working for another repo (e.g. license-manager), and still see this error), but we do not have the access to verify this.

Can you please help us by taking a peek at the GHA linked and let us know if token scoping is correct? If it is correct, if anything else catches you that could be helpful too, because we're out of ideas, but to start, token scoping is what we're thinking :)

Reasoning

We'd like to get automated python requirements PRs made to the repository.

[openedx-workflow-automation]

Thank you for your report! @openedx/axim-oncall will triage within a business day. Simple requests usually take 2-3 business days to resolve; more complex requests could take longer.

[brian-smith-tcril]

I looked into the instructions here and found the edx-requirements-bot team did not have write access on the repo. I have added that. If you can test and see if that fixed the issue that'd be perfect!

[christopappas]

Success! Thank you very much!