Unexpected 403 Forbidden response from manifest upload. Errors: DENIED - action package publishing is not enabled for this repository

[ssbarnea]

Apparently I got this error from the action despite the fact it was configured exactly like in the readme:

Unexpected 403 Forbidden response from manifest upload. Errors: DENIED - action package publishing is not enabled for this repository

That message does not mention where this is expected to be enabled from either. Was anyone able to use this action?

Example: https://github.com/coactions/upload-artifact/actions/workflows/publish-immutable-actions.yml

[jsoref]

That appears to be:

publish-immutable-action/README.md

Lines 3 to 5 in 4bc8754

	> [!IMPORTANT]
	> This action is **not ready for public use**. It is part of an upcoming public roadmap item (see [GitHub Actions: Immutable actions publishing](https://github.com/github/roadmap/issues/592)).
	> Attempts to use this action to upload an OCI artifact will not work until this feature has been fully released to the public. Please do not attempt to use it until that time.

GitHub themselves clearly use this, as seen in https://github.com/actions/cache/blob/0057852bfaa89a56745cba8c7296529d2fc39830/.github/workflows/publish-immutable-actions.yml#L17 /
https://github.com/actions/cache/actions/runs/17978822786/job/51139074999#step:3:37

Afaict, at least the docker org has been able to use the action (I'd imagine they're one of the early private beta users):
https://github.com/docker/build-push-action/actions/workflows/publish.yml

Similarly, dagger appears to use it:
https://github.com/dagger/dagger-for-github/actions/runs/17921589324/job/50957700962

Along with step-security/harden-runner:
https://github.com/step-security/harden-runner/actions/runs/17591360764/job/49972669804#step:5:33

And pulumi:
https://github.com/pulumi/actions/actions/runs/18125068726/job/51578333218#step:3:43

Offhand, I think that's probably all public instances.