Hi everyone. We just converted from the free trial of Enterprise to a Team subscription and I realiz...

plain-rainbow-89145

05/06/2025, 2:12 PM

Hi everyone. We just converted from the free trial of Enterprise to a Team subscription and I realized our CI/CD errors out now due to the pulumi Github auth action using an organization token erroring out since we are not on an enterprise plan. What is the recommended alternative? Is there still a way to use the OIDC set up without the organization token?

little-cartoon-10569

05/06/2025, 8:25 PM

Is that Pulumi getting tokens from GitHub to use the GitHub provider, or GitHub getting tokens from Pulumi to run

pulumi up

? I believe both work using a personal token, though I've only tried the latter.

plain-rainbow-89145

05/06/2025, 10:11 PM

It is Github getting Pulumi tokens to be able to then run

pulumi up

. Okay, I'll have to try it with the personal one then, thank you

plain-rainbow-89145

05/08/2025, 8:55 AM

Hi @little-cartoon-10569, silly question for you. I know that the personal access token can be created in settings. But how can I combine that with the pulumi auth action? I see that the

requested-token-type

can be specified as personal and then I can add my scope to use my user, but then I get unauthorized when running the actions

little-cartoon-10569

05/08/2025, 9:13 AM

It's been a while since I used GitHub with Pulumi, but iirc, I used the auth action with OIDC, and requested the PAT. You're going the other way: starting with a PAT. So maybe you don't need the auth action? Just set PULUMI_ACCESS_TOKEN and use

pulumi preview

directly from a workflow step.

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.