# GitHub API: Forbidden

**URL:** <https://community.codecov.com/t/github-api-forbidden/1295>\
**Category:** Bug Fixes\
**Created:** [April 17, 2020, 10:10am UTC](https://community.codecov.com/t/github-api-forbidden/1295 "2020-04-17T10:10:19Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![paulgessinger](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/paulgessinger/32/640_2.png) [@paulgessinger](https://community.codecov.com/u/paulgessinger)\
**Post date:** [April 17, 2020, 10:10am UTC](https://community.codecov.com/t/github-api-forbidden/1295/1 "2020-04-17T10:10:20Z")

</div>

### Description

When clicking on coverage status check results, Codecov prompts all users to log in to continue, and doing so just results in an error “GitHub API: Forbidden”, with an identical login prompt. Doing that a few times results in GitHub API rate limiting and reauthorization request for the GH App. Everything is public, no private components.

### Repository

> **[GitHub - acts-project/acts: Experiment-independent toolkit for (charged)...](https://github.com/acts-project/acts)**
>
> Experiment-independent toolkit for (charged) particle track reconstruction in (high energy) physics experiments implemented in modern C++

### Steps to Reproduce

> **[Code coverage done right.](https://app.codecov.io/gh/acts-project/acts/compare/109)**
>
> Hosted coverage report highly integrated with GitHub, Bitbucket and GitLab. Awesome pull request comments to enhance your QA.

**Expected behavior:** See the diff and coverage report

**Actual behavior:** I cannot view anything, and am prompted to login repeatedly.

**Flakiness?** Not sure.

---

<div class="post-metadata">

**Author:** ![atugushev](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/atugushev/32/256_2.png) [@atugushev](https://community.codecov.com/u/atugushev)\
**Post date:** [April 21, 2020, 7:57pm UTC](https://community.codecov.com/t/github-api-forbidden/1295/2 "2020-04-21T19:57:23Z")

</div>

I’m experiencing the same issue.

---

<div class="post-metadata">

**Author:** ![JeremyMarshall](https://avatars.discourse-cdn.com/v4/letter/j/5daacb/32.png) [@JeremyMarshall](https://community.codecov.com/u/JeremyMarshall)\
**Post date:** [May 4, 2020, 4:04pm UTC](https://community.codecov.com/t/github-api-forbidden/1295/3 "2020-05-04T16:04:51Z")

</div>

I’m getting this too on [Codecov](https://codecov.io/gh/bythepowerof/kmake_gql_client/src/subscription/kmake_gql_client/ __init__.py)

---

<div class="post-metadata">

**Author:** ![drazisil](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/drazisil/32/496_2.png) [@drazisil](https://community.codecov.com/u/drazisil)\
**Post date:** [May 7, 2020, 4:20pm UTC](https://community.codecov.com/t/github-api-forbidden/1295/4 "2020-05-07T16:20:23Z")

</div>

This is caused by rate limiting on the public user used to call the API to fetch the source code for display. We have requested a rate increase for this user and apologize for the inconvenience.

---

<div class="post-metadata">

**Author:** ![vtjnash](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/vtjnash/32/1314_2.png) [@vtjnash](https://community.codecov.com/u/vtjnash)\
**Post date:** [November 17, 2020, 2:31am UTC](https://community.codecov.com/t/github-api-forbidden/1295/5 "2020-11-17T02:31:53Z")

</div>

I think I’m seeing this today too on public repos. It works when I’m logged in, and gives the above error if I am not. Was Github able to fix it on their end? It would be helpful to have this error message mention that logging into Github may be a work around.

Happening on: [Codecov](https://codecov.io/gh/JuliaCI/Coverage.jl/src/master/src/codecovio.jl)

---

<div class="post-metadata">

**Author:** ![tom](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/tom/32/8_2.png) [@tom](https://community.codecov.com/u/tom)\
**Post date:** [November 17, 2020, 2:34am UTC](https://community.codecov.com/t/github-api-forbidden/1295/6 "2020-11-17T02:34:33Z")

</div>

@vtjnash, I’m able to load that page right now. Can you try again?

---

<div class="post-metadata">

**Author:** ![vtjnash](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/vtjnash/32/1314_2.png) [@vtjnash](https://community.codecov.com/u/vtjnash)\
**Post date:** [November 17, 2020, 2:51am UTC](https://community.codecov.com/t/github-api-forbidden/1295/7 "2020-11-17T02:51:34Z")

</div>

Yep, seems to be working again, even when I’m not authenticated