What this error means

remote: Permission to OWNER/REPO.git denied to github-actions[bot]. fatal: unable to access: The requested URL returned error: 403 is a GitHub Actions failure pattern reported for developers trying to github actions workflow fails with 403 permission denied when trying to commit/push changes. pat works locally but github_token fails in ci. developer needs workflow-level permissions fix.. Based on the imported evidence, treat this as a tool-specific troubleshooting page rather than a generic API error.

Why this happens

Multiple StackOverflow and GitHub community discussions document this persistent issue. Pattern: workflows use default GITHUB_TOKEN but repository settings have restricted write permissions. Also happens when workflow YAML has explicit read-only permissions: block that prevents write operations. Fix requires either setting permissions: contents: write at workflow level OR enabling Read/Write Permissions for GITHUB_TOKEN in repo Settings → Actions → General. Very common in automated bot workflows (dependency updates, scheduled jobs). High commercial value: blocks CI/CD pipelines for paid teams. Category: GitHub Actions.

Common causes

  • Multiple StackOverflow and GitHub community discussions document this persistent issue. Pattern: workflows use default GITHUB_TOKEN but repository settings have restricted write permissions. Also happens when workflow YAML has explicit read-only permissions: block that prevents write operations. Fix requires either setting permissions: contents: write at workflow level OR enabling Read/Write Permissions for GITHUB_TOKEN in repo Settings → Actions → General. Very common in automated bot workflows (dependency updates, scheduled jobs). High commercial value: blocks CI/CD pipelines for paid teams. Category: GitHub Actions.

Quick fixes

  1. Confirm the exact error signature matches remote: Permission to OWNER/REPO.git denied to github-actions[bot]. fatal: unable to access: The requested URL returned error: 403.
  2. Check the GitHub Actions account, local tool state, and provider configuration involved in the failing workflow.
  3. Compare the failing environment with a known working setup, then change one configuration value at a time.

Platform/tool-specific checks

  • Verify the command, editor, extension, or API client that produced the error.
  • Compare local settings with CI, deployment, or editor-level settings when the error appears in only one environment.
  • Avoid deleting credentials, local model data, or project settings until the failing scope is clear.

Step-by-step troubleshooting

  1. Capture the exact error message and the command, editor action, or request that triggered it.
  2. Check whether the failure is account/auth, quota/rate, model/provider, local runtime, or deployment configuration.
  3. Review the source evidence below and compare it with your environment.
  4. Apply one change at a time and rerun the smallest failing action.
  5. Keep the working fix documented for the team or deployment environment.

How to prevent it

  • Keep provider/tool configuration documented.
  • Record non-secret diagnostics such as tool version, provider name, model name, and command path.
  • Add a lightweight check before CI or production workflows depend on the tool.