Actions dispatch returns HTTP 422 disabled while permissions API says enabled

[2217173240]

Discussion type

Question / possible bug in GitHub Actions repository or account state.

Repository and impact

Public repository: https://githubfast.kdns.fr/2217173240/grok-bot-0.18-reconstructed

I have administrator permission. Workflow dispatch is rejected as disabled even though the repository permissions API reports Actions enabled and the workflows are active. This blocks required PR checks and CodeQL initialization.

Reproduced on October 10, 2026 (Asia/Singapore), including immediately before posting this discussion.

Reproduction and exact results

1. Run:

gh api repos/2217173240/grok-bot-0.18-reconstructed/actions/permissions

Result:

{"enabled":true,"allowed_actions":"all","sha_pinning_required":false}

2. List repository workflows. Existing workflows report state: active, including repository checks (ID 357736368), Linux amd64 runtime, macOS arm64 package, and Windows portable package.

3. Dispatch the existing workflow on the pushed branch:

gh workflow run check.yml --repo 2217173240/grok-bot-0.18-reconstructed --ref security/repository-settings

Result:

could not create workflow dispatch event: HTTP 422: Actions has been disabled for this repository. (https://api.githubfast.kdns.fr/repos/2217173240/grok-bot-0.18-reconstructed/actions/workflows/357736368/dispatches)

4. Re-applying repository Actions permissions with enabled=true and allowed_actions=all succeeds. Reading permissions again confirms enabled=true, but dispatching again produces the same HTTP 422.

Related security initialization

CodeQL default setup initialization is queued with no jobs:
https://githubfast.kdns.fr/2217173240/grok-bot-0.18-reconstructed/actions/runs/38024328571

The default-setup API reports state=configured, languages=[], query_suite=extended, threat_model=remote, updated_at=null, and schedule=null. A configuration update returns HTTP 409, Configuration update already in progress.

The affected PR is 2217173240/grok-bot-0.18-reconstructed#116. It has not been merged by bypassing its required checks.

Expected behavior

An enabled repository with active workflows should accept workflow_dispatch; required PR checks should run; CodeQL initialization should complete or provide an actionable failure.

Support outcome and question

GitHub Support ticket #4842637 was submitted with these details and then closed because the support options available to this account are self-service resources. Support directed me to Community Discussions.

Is there a separate account-level Actions restriction or backend disabled state that is not represented by the repository permissions API? How can the repository owner identify and resolve it, or have the appropriate GitHub team investigate? Please also advise how to recover the pending CodeQL initialization after Actions execution is restored.

I am reporting observed API behavior, not asserting a cause. No authentication tokens, private account information, or sensitive logs are included.

[github-actions[bot]]

Thank you for your interest in contributing to our community! We currently only accept discussions created through the GitHub UI using our provided discussion templates. Please re-submit your discussion by navigating to the appropriate category and using the template provided.

This discussion has been closed because it was not submitted through the expected format. If you believe this was a mistake, please reach out to the maintainers.