Composite actions from other repository in Gitea ? #41

andyqp · 2025-04-28T14:25:10Z

andyqp
Apr 28, 2025

Does this runner support references to composite actions in a gitea repository other than the repository of the calling workflow?

I have tried both org/repo/.gitea/actions/action-name@label and absolute (https://...) references - none of them seem to work.

References to local composite actions (./.gitea/actions/action-name) are working.

I am using self-hosted gitea server.

ChristopherHX · 2025-04-28T15:19:32Z

ChristopherHX
Apr 28, 2025
Maintainer

This runner should support both syntaxes.

org/repo/.gitea/actions/action-name@label

This is expected to work from my side.

Create Secret ACTIONS_STEP_DEBUG and set it to value true
post the log
Is the action in a private repo?

Does your composite action uses https://... inside an action.yml file?

If yes you need runner type 2 (runner.server)

0 replies

andyqp · 2025-04-29T18:21:21Z

andyqp
Apr 29, 2025
Author

1., 2. done, logs are attached for both cases.

using_org_repo_uri.log
using_absolute_uri.log

the action is in public repo on my self-hosted server

The action uses https://github.com/ChristopherHX/gitea-download-artifact@v4 . The runner is gitea-actions-runner-0.0.20-windows-amd64.exe , set as type 2 during registration.

Looking in the log files, it seems that the action is not even downloaded. The variation without https:// appends https://github.com in front for some reason.

The IP address 192.168.0.206 corresponds to the machine where runner is... running.

3 replies

ChristopherHX Apr 29, 2025
Maintainer

hmm, I guess that I need a trace log functionality for this runner...

The variation without https:// appends https://github.com in front for some reason.

This is a fallback if your instance returns a http error, maybe authentication or network level.

I wonder what does your Gitea Instance log if you run that job (instance admin only)?

using_absolute_uri.log

This syntax does an unauthenticated clone by default. I assume your gitea is secured and this repository is invisible to unauthenticated users.
Maybe try add authentication like https://token:${{ secrets.PRIVATE_PAT }}@server/owner/repo@main or https://token:${{ gitea.token }}@server/owner/repo@main

where the first expects you to add PRIVATE_PAT to your secrets with an Application / Personal Access Token and the latter might fail if the implicit token has no read access.

Found a potenial bug in using_org_repo_uri case, the head api call is unauthenticated... at

gitea-actions-runner/actions/server/server.go

Line 197 in b65e2ec

    
           if resp, err := http.Head(resolved.TarballUrl); err == nil && resp.StatusCode >= 200 && resp.StatusCode < 300 {

Maybe I should also allow implict gitea.token auth of the same instance if you use absolute url syntax.

ChristopherHX Apr 29, 2025
Maintainer

Maybe try add authentication like https://token:${{ secrets.PRIVATE_PAT }}@server/owner/repo@main or https://token:${{ gitea.token }}@server/owner/repo@main

I need to check if I need to fix something to get this syntax working in composite actions, since the use of secrets in a field not allowed by GitHub Actions... While Gitea Actions adds this feature...

andyqp Apr 30, 2025
Author

I wonder what does your Gitea Instance log if you run that job (instance admin only)?

I hope this contains the relevant part.

2025/04/30 06:41:55 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/96/jobs/1/rerun for 192.168.0.52:0, 200 OK in 58.4ms @ actions/view.go:366(actions.Rerun)
2025/04/30 06:41:55 ...eb/routing/logger.go:102:func1() [I] router: completed GET /andy/ActionsTests/actions/runs/96/jobs/1 for 192.168.0.52:0, 200 OK in 25.7ms @ actions/view.go:57(actions.View)
2025/04/30 06:41:55 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/FetchTask for 192.168.0.209:0, 200 OK in 32.7ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 06:41:55 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/96/jobs/1 for 192.168.0.52:0, 200 OK in 25.6ms @ actions/view.go:183(actions.ViewPost)
2025/04/30 06:41:56 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/FetchTask for 192.168.0.206:0, 200 OK in 73.9ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 06:41:57 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/96/jobs/1 for 192.168.0.52:0, 200 OK in 14.8ms @ actions/view.go:183(actions.ViewPost)
2025/04/30 06:41:58 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/96/jobs/1 for 192.168.0.52:0, 200 OK in 15.8ms @ actions/view.go:183(actions.ViewPost)
2025/04/30 06:41:59 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/96/jobs/1 for 192.168.0.52:0, 200 OK in 14.9ms @ actions/view.go:183(actions.ViewPost)
2025/04/30 06:42:00 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/96/jobs/1 for 192.168.0.52:0, 200 OK in 23.8ms @ actions/view.go:183(actions.ViewPost)
2025/04/30 06:42:00 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/FetchTask for 192.168.0.209:0, 200 OK in 38.1ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 06:42:00 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/FetchTask for 192.168.0.209:0, 200 OK in 22.8ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 06:42:01 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/96/jobs/1 for 192.168.0.52:0, 200 OK in 18.1ms @ actions/view.go:183(actions.ViewPost)
2025/04/30 06:42:01 ...eb/routing/logger.go:102:func1() [I] router: completed HEAD /api/v1/repos/isoft/giteaworkflows/archive/master.tar.gz for 192.168.0.206:0, 405 Method Not Allowed in 0.1ms @ v1/api.go:770(v1.Routes.verifyAuthWithOptions)
2025/04/30 06:42:02 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/UpdateTask for 192.168.0.206:0, 200 OK in 38.6ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 06:42:02 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/96/jobs/1 for 192.168.0.52:0, 200 OK in 27.2ms @ actions/view.go:183(actions.ViewPost)
2025/04/30 06:42:02 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/UpdateLog for 192.168.0.206:0, 200 OK in 57.0ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2

using_absolute_uri.log

This syntax does an unauthenticated clone by default. I assume your gitea is secured and this repository is invisible to unauthenticated users. Maybe try add authentication like https://token:${{ secrets.PRIVATE_PAT }}@server/owner/repo@main or https://token:${{ gitea.token }}@server/owner/repo@main

where the first expects you to add PRIVATE_PAT to your secrets with an Application / Personal Access Token and the latter might fail if the implicit token has no read access.

Found a potenial bug in using_org_repo_uri case, the head api call is unauthenticated... at

gitea-actions-runner/actions/server/server.go

Line 197 in b65e2ec

if resp, err := http.Head(resolved.TarballUrl); err == nil && resp.StatusCode >= 200 && resp.StatusCode < 300 {

Maybe I should also allow implict gitea.token auth of the same instance if you use absolute url syntax.

I have tried the https://token: syntax (even by setting the (temporary) token directly in workflow's env: as a string). On gitea instance side there is simple 404 on some GET ... archive.zip call, nothing else

2025/04/30 07:11:28 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/99/jobs/1/rerun for 192.168.0.52:0, 200 OK in 39.0ms @ actions/view.go:366(actions.Rerun)
2025/04/30 07:11:28 ...eb/routing/logger.go:102:func1() [I] router: completed GET /andy/ActionsTests/actions/runs/99/jobs/1 for 192.168.0.52:0, 200 OK in 41.7ms @ actions/view.go:57(actions.View)
2025/04/30 07:11:28 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/FetchTask for 192.168.0.206:0, 200 OK in 98.4ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 07:11:28 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/99/jobs/1 for 192.168.0.52:0, 200 OK in 37.6ms @ actions/view.go:183(actions.ViewPost)
2025/04/30 07:11:28 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/FetchTask for 192.168.0.209:0, 200 OK in 49.1ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 07:11:29 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/FetchTask for 192.168.0.209:0, 200 OK in 43.6ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 07:11:29 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/99/jobs/1 for 192.168.0.52:0, 200 OK in 26.7ms @ actions/view.go:183(actions.ViewPost)
2025/04/30 07:11:30 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/99/jobs/1 for 192.168.0.52:0, 200 OK in 28.6ms @ actions/view.go:183(actions.ViewPost)
2025/04/30 07:11:30 ...eb/routing/logger.go:102:func1() [I] router: completed GET /isoft/giteaworkflows/archive/master.zip for 192.168.0.206:0, 404 Not Found in 2.4ms @ context/repo.go:401(context.RepoAssignment)
2025/04/30 07:11:31 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/99/jobs/1 for 192.168.0.52:0, 200 OK in 27.6ms @ actions/view.go:183(actions.ViewPost)
2025/04/30 07:11:31 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/UpdateTask for 192.168.0.206:0, 200 OK in 59.1ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 07:11:31 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/UpdateLog for 192.168.0.206:0, 0  in 29.2ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 07:11:31 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/UpdateLog for 192.168.0.206:0, 200 OK in 50.7ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 07:11:32 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/UpdateLog for 192.168.0.206:0, 200 OK in 28.5ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 07:11:32 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/UpdateTask for 192.168.0.206:0, 200 OK in 39.6ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 07:11:32 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/FetchTask for 192.168.0.206:0, 200 OK in 35.4ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 07:11:32 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests/actions/runs/99/jobs/1 for 192.168.0.52:0, 200 OK in 21.9ms @ actions/view.go:183(actions.ViewPost)
2025/04/30 07:11:33 ...eb/routing/logger.go:102:func1() [I] router: completed GET /andy/ActionsTests.git/info/refs?service=git-upload-pack for 192.168.0.52:0, 200 OK in 5.8ms @ repo/githttp.go:518(repo.GetInfoRefs)
2025/04/30 07:11:33 ...eb/routing/logger.go:102:func1() [I] router: completed POST /andy/ActionsTests.git/git-upload-pack for 192.168.0.52:0, 200 OK in 5.0ms @ repo/githttp.go:478(repo.ServiceUploadPack)
2025/04/30 07:11:33 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/FetchTask for 192.168.0.209:0, 200 OK in 27.2ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)
2025/04/30 07:11:34 ...eb/routing/logger.go:102:func1() [I] router: completed POST /api/actions/runner.v1.RunnerService/FetchTask for 192.168.0.209:0, 200 OK in 27.8ms @ <autogenerated>:1(http.Handler.ServeHTTP-fm)

The action's log looks like before, no trace of the token: part of url

2025-04-30T07:48:50.8242545Z Getting action download info
2025-04-30T07:48:50.8242545Z Download action repository 'https~//gitea.isoft.lv/isoft/giteaworkflows@master' (SHA:N/A)
2025-04-30T07:48:50.8242545Z ##[error]An action could not be found at the URI 'http://192.168.0.206:52494/_apis/v1/ActionDownload?jobId=af4fdde1-1787-40ad-8cc6-40db46728122&url=https%3A%2F%2Fgitea.isoft.lv%2Fisoft%2Fgiteaworkflows%2Farchive%2Fmaster.zip'
2025-04-30T07:48:50.8242545Z ##[debug]GitHub.Runner.Worker.ActionNotFoundException: An action could not be found at the URI 'http://192.168.0.206:52494/_apis/v1/ActionDownload?jobId=af4fdde1-1787-40ad-8cc6-40db46728122&url=https%3A%2F%2Fgitea.isoft.lv%2Fisoft%2Fgiteaworkflows%2Farchive%2Fmaster.zip'
2025-04-30T07:48:50.8242545Z ##[debug]   at GitHub.Runner.Worker.ActionManager.DownloadRepositoryArchive(IExecutionContext executionContext, String downloadUrl, String downloadAuthToken, String archiveFile) in /home/runner/work/runner.server/runner.server/src/Runner.Worker/ActionManager.cs:line 1137
2025-04-30T07:48:50.8242545Z ##[debug]   at GitHub.Runner.Worker.ActionManager.DownloadRepositoryActionAsync(IExecutionContext executionContext, ActionDownloadInfo downloadInfo) in /home/runner/work/runner.server/runner.server/src/Runner.Worker/ActionManager.cs:line 834
2025-04-30T07:48:50.8242545Z ##[debug]   at GitHub.Runner.Worker.ActionManager.PrepareActionsRecursiveAsync(IExecutionContext executionContext, PrepareActionsState state, IEnumerable`1 actions, Int32 depth, Guid parentStepId) in /home/runner/work/runner.server/runner.server/src/Runner.Worker/ActionManager.cs:line 213
2025-04-30T07:48:50.8242545Z ##[debug]   at GitHub.Runner.Worker.ActionManager.PrepareActionsAsync(IExecutionContext executionContext, IEnumerable`1 steps, Guid rootStepId) in /home/runner/work/runner.server/runner.server/src/Runner.Worker/ActionManager.cs:line 108
2025-04-30T07:48:50.8242545Z ##[debug]   at GitHub.Runner.Worker.JobExtension.InitializeJob(IExecutionContext jobContext, AgentJobRequestMessage message) in /home/runner/work/runner.server/runner.server/src/Runner.Worker/JobExtension.cs:line 243
2025-04-30T07:48:50.8242545Z ##[debug]Finishing: Set up job

ChristopherHX · 2025-04-29T20:12:41Z

ChristopherHX
Apr 29, 2025
Maintainer

Definitely need e2e tests that tests various of gitea configuration and repository visibility levels...

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Composite actions from other repository in Gitea ? #41

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 3 comments 3 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Uh oh!

Composite actions from other repository in Gitea ? #41

Uh oh!

Uh oh!

andyqp Apr 28, 2025

Replies: 3 comments · 3 replies

Uh oh!

ChristopherHX Apr 28, 2025 Maintainer

Uh oh!

andyqp Apr 29, 2025 Author

Uh oh!

ChristopherHX Apr 29, 2025 Maintainer

Uh oh!

ChristopherHX Apr 29, 2025 Maintainer

Uh oh!

andyqp Apr 30, 2025 Author

Uh oh!

ChristopherHX Apr 29, 2025 Maintainer

andyqp
Apr 28, 2025

Replies: 3 comments 3 replies

ChristopherHX
Apr 28, 2025
Maintainer

andyqp
Apr 29, 2025
Author

ChristopherHX Apr 29, 2025
Maintainer

ChristopherHX Apr 29, 2025
Maintainer

andyqp Apr 30, 2025
Author

ChristopherHX
Apr 29, 2025
Maintainer