Authenticate setup-php against the GitHub API #175

Merged

thatguygriff merged 1 commits from ci/github-token-for-setup-php into main

2026-08-20 16:56:39 +00:00

Author	SHA1	Message	Date
thatguygriffandClaude Opus 5	1291af0b72	Authenticate setup-php against the GitHub API CI / PHPStan (pull_request) Successful in 6m52s Details CI / Tests (PHP 8.1) (pull_request) Successful in 6m0s Details CI / Tests (PHP 8.2) (pull_request) Successful in 1m11s Details CI / Tests (PHP 8.3) (pull_request) Successful in 2m55s Details CI / No Debug Code (pull_request) Successful in 2s Details CI / Coding Standards (pull_request) Successful in 7m6s Details CI / Build Plugin Zip (pull_request) Skipped Details setup-php resolves its tools through the GitHub API, unauthenticated at 60 requests an hour per source address. A CI fan-out across the fleet exhausts that bucket, and the step then retries for several minutes before reporting only "Could not setup PHP 8.3". It reads as a hang rather than a throttle, and it took out both a main CI run and a release build. Each cluster has its own egress address and so its own bucket, which is why the same job passed on one runner and failed on another in the same minute. The token comes from 1Password through the Connect instance in whichever cluster picked up the job, matching the pattern in thatguygriff/infra. That repository's composite action is not reachable from here, so it is mirrored locally. It stays a step output rather than being exported to the job environment, to keep it away from the package scripts composer install runs. Co-Authored-By: Claude Opus 5 <[email protected]> Claude-Session: https://claude.ai/code/session_0133tYSQoZhoKebKZV8o2GPs	2026-08-20 13:27:22 -03:00

Author

SHA1

Message

Date

thatguygriffandClaude Opus 5

1291af0b72

Authenticate setup-php against the GitHub API

CI / PHPStan (pull_request) Successful in 6m52s

Details

CI / Tests (PHP 8.1) (pull_request) Successful in 6m0s

Details

CI / Tests (PHP 8.2) (pull_request) Successful in 1m11s

Details

CI / Tests (PHP 8.3) (pull_request) Successful in 2m55s

Details

CI / No Debug Code (pull_request) Successful in 2s

Details

CI / Coding Standards (pull_request) Successful in 7m6s

Details

CI / Build Plugin Zip (pull_request) Skipped

Details

setup-php resolves its tools through the GitHub API, unauthenticated at 60
requests an hour per source address. A CI fan-out across the fleet exhausts
that bucket, and the step then retries for several minutes before reporting
only "Could not setup PHP 8.3". It reads as a hang rather than a throttle,
and it took out both a main CI run and a release build.

Each cluster has its own egress address and so its own bucket, which is why
the same job passed on one runner and failed on another in the same minute.

The token comes from 1Password through the Connect instance in whichever
cluster picked up the job, matching the pattern in thatguygriff/infra. That
repository's composite action is not reachable from here, so it is mirrored
locally. It stays a step output rather than being exported to the job
environment, to keep it away from the package scripts composer install runs.

Co-Authored-By: Claude Opus 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_0133tYSQoZhoKebKZV8o2GPs

2026-08-20 13:27:22 -03:00