upload-merged-plugin Action Error #842

Closed
opened 2026-02-16 10:20:41 -05:00 by yindo · 2 comments
Owner

Originally created by @xuegao-tzx on GitHub (Nov 30, 2025).

Self Checks

  • This is only for bug report, if you would like to ask a question, please head to Discussions.
  • I have searched for existing issues Dify issues & Dify Official Plugins, including closed ones.
  • I confirm that I am using English to submit this report (我已阅读并同意 Language Policy).
  • [FOR CHINESE USERS] 请务必使用英文提交 Issue,否则会被关闭。谢谢!:)
  • Please do not modify this template :) and fill in all the required fields.

Dify version

1.9.0

Plugin version

1.0.0

Cloud or Self Hosted

Cloud

Steps to reproduce

Image

✔️ Error log

Image

HTTP 401: Bad credentials (https://api.github.com/graphql)

Originally created by @xuegao-tzx on GitHub (Nov 30, 2025). ### Self Checks - [x] This is only for bug report, if you would like to ask a question, please head to [Discussions](https://github.com/langgenius/dify/discussions/categories/general). - [x] I have searched for existing issues [Dify issues](https://github.com/langgenius/dify/issues) & [Dify Official Plugins](https://github.com/langgenius/dify-official-plugins/issues), including closed ones. - [x] I confirm that I am using English to submit this report (我已阅读并同意 [Language Policy](https://github.com/langgenius/dify/issues/1542)). - [x] [FOR CHINESE USERS] 请务必使用英文提交 Issue,否则会被关闭。谢谢!:) - [x] Please do not modify this template :) and fill in all the required fields. ### Dify version 1.9.0 ### Plugin version 1.0.0 ### Cloud or Self Hosted Cloud ### Steps to reproduce <img width="1375" height="504" alt="Image" src="https://github.com/user-attachments/assets/f21bb487-c330-4f07-a377-3e84b4491f78" /> ### ✔️ Error log <img width="682" height="285" alt="Image" src="https://github.com/user-attachments/assets/bde698a2-281f-4643-b5c1-934187b38690" /> HTTP 401: Bad credentials (https://api.github.com/graphql)
yindo added the bug label 2026-02-16 10:20:41 -05:00
yindo closed this issue 2026-02-16 10:20:41 -05:00
Author
Owner

@dosubot[bot] commented on GitHub (Nov 30, 2025):

The HTTP 401 "Bad credentials" error in the upload-merged-plugin workflow is caused by an authentication failure when the GitHub CLI tries to clone a private repo or download a release. The workflow uses the ORG_SCOPE_GITHUB_TOKEN secret for these steps, not the default GITHUB_TOKEN. This error means the token is missing, invalid, expired, or doesn't have the required scopes (like "repo" and "read:packages") for these operations.

To fix this, check that the ORG_SCOPE_GITHUB_TOKEN secret exists in your repository or organization settings, is valid, and has the necessary permissions. If needed, update or recreate the secret with a personal access token that includes the required scopes. This should resolve the authentication issue and allow the workflow to complete successfully. You can review the workflow configuration and token usage here.

To reply, just mention @dosu.


How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other

Open in Cursor Join Discord Share on X

@dosubot[bot] commented on GitHub (Nov 30, 2025): <!-- Answer --> The HTTP 401 "Bad credentials" error in the upload-merged-plugin workflow is caused by an authentication failure when the GitHub CLI tries to clone a private repo or download a release. The workflow uses the ORG_SCOPE_GITHUB_TOKEN secret for these steps, not the default GITHUB_TOKEN. This error means the token is missing, invalid, expired, or doesn't have the required scopes (like "repo" and "read:packages") for these operations. To fix this, check that the ORG_SCOPE_GITHUB_TOKEN secret exists in your repository or organization settings, is valid, and has the necessary permissions. If needed, update or recreate the secret with a personal access token that includes the required scopes. This should resolve the authentication issue and allow the workflow to complete successfully. You can review the workflow configuration and token usage [here](https://github.com/langgenius/dify-official-plugins/blob/3e0b614056d4791eae0b07af9e38b8a9e2b8d016/.github/workflows/upload-merged-plugin.yaml#L3-L75). <!-- Dosu Comment Footer --> *To reply, just mention [@dosu](https://go.dosu.dev/dosubot).* --- <sup>How did I do? [Good](https://app.dosu.dev/response-feedback/6ab6f07f-58d1-4a1d-b0c7-b9ad05691d9a?feedback_type=great_response) | [Irrelevant](https://app.dosu.dev/response-feedback/6ab6f07f-58d1-4a1d-b0c7-b9ad05691d9a?feedback_type=irrelevant_answer) | [Incorrect](https://app.dosu.dev/response-feedback/6ab6f07f-58d1-4a1d-b0c7-b9ad05691d9a?feedback_type=incorrect_sources) | [Verbose](https://app.dosu.dev/response-feedback/6ab6f07f-58d1-4a1d-b0c7-b9ad05691d9a?feedback_type=too_verbose) | [Hallucination](https://app.dosu.dev/response-feedback/6ab6f07f-58d1-4a1d-b0c7-b9ad05691d9a?feedback_type=hallucination) | [Report 🐛](https://app.dosu.dev/response-feedback/6ab6f07f-58d1-4a1d-b0c7-b9ad05691d9a?feedback_type=bug_report) | [Other](https://app.dosu.dev/response-feedback/6ab6f07f-58d1-4a1d-b0c7-b9ad05691d9a?feedback_type=other)</sup> [![Open in Cursor](https://dosu.dev/dosu-in-cursor.svg)](https://cursor.com/link/prompt?text=The%20HTTP%20401%20%22Bad%20credentials%22%20error%20in%20the%20upload-merged-plugin%20workflow%20is%20caused%20by%20an%20authentication%20failure%20when%20the%20GitHub%20CLI%20tries%20to%20clone%20a%20private%20repo%20or%20download%20a%20release.%20The%20workflow%20uses%20the%20ORG_SCOPE_GITHUB_TOKEN%20secret%20for%20these%20steps%2C%20not%20the%20default%20GITHUB_TOKEN.%20This%20error%20means%20the%20token%20is%20missing%2C%20invalid%2C%20expired%2C%20or%20doesn%27t%20have%20the%20required%20scopes%20%28like%20%22repo%22%20and%20%22read%3Apackages%22%29%20for%20these%20operations.%20%0A%0ATo%20fix%20this%2C%20check%20that%20the%20ORG_SCOPE_GITHUB_TOKEN%20secret%20exists%20in%20your%20repository%20or%20organization%20settings%2C%20is%20valid%2C%20and%20has%20the%20necessary%20permissions.%20If%20needed%2C%20update%20or%20recreate%20the%20secret%20with%20a%20personal%20access%20token%20that%20includes%20the%20required%20scopes.%20This%20should%20resolve%20the%20authentication%20issue%20and%20allow%20the%20workflow%20to%20complete%20successfully.%20You%20can%20review%20the%20workflow%20configuration%20and%20token%20usage%20%5Bhere%5D%28https%3A//github.com/langgenius/dify-official-plugins/blob/3e0b614056d4791eae0b07af9e38b8a9e2b8d016/.github/workflows/upload-merged-plugin.yaml%23L3-L75%29.)&nbsp;[![Join Discord](https://img.shields.io/badge/join-5865F2?logo=discord&logoColor=white&label=)](https://go.dosu.dev/discord-bot)&nbsp;[![Share on X](https://img.shields.io/badge/X-share-black)](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/langgenius/dify-official-plugins/issues/2156)
Author
Owner

@hjlarry commented on GitHub (Dec 2, 2025):

fixed now

@hjlarry commented on GitHub (Dec 2, 2025): fixed now
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langgenius/dify-official-plugins#842