Secrets store bindings unavailable in github action

[mgandolfi7]

Which Cloudflare product(s) does this pertain to?

Wrangler, Other

What versions & operating system are you using?

cloudflare/wrangler-action@v3, wrangler 4.11.0, Ubuntu 24.04.2 LTS

Please provide a link to a minimal reproduction

No response

Describe the Bug

I am using wrangler-action to automate deployments. My workers that use the new secrets store beta fail with the following error:

 ✘ [ERROR] A request to the Cloudflare API (/accounts/***/workers/scripts/api-production/versions) failed.
  
    failed to fetch secrets store binding due to authorization error - check deploy permissions and secret scopes [code: 10021]

I have confirmed that my Cloudflare API token has then Account permission for Secrets Store with Read level access.

Please provide any relevant error logs

✘ [ERROR] A request to the Cloudflare API (/accounts/***/workers/scripts/api-production/versions) failed.
  
    failed to fetch secrets store binding due to authorization error - check deploy permissions and secret scopes [code: 10021]

Workaround

Add EDIT access to your API token.

[mgandolfi7]

I gave it edit access and its working now? Not sure why.

[murbanowicz]

same here - I had to add edit permission on secrets, even though it needs only to read them I believe.

[meywd]

Same on workers deployment using wrangler.

if I add the following to the wrangler.json

  "secrets_store_secrets": [
    {
      "binding": "RESEND_API_KEY",
      "store_id": "<store id>",
      "secret_name": "RESEND_API_KEY"
    }
  ]

I get the following build error

 failed to fetch secrets store binding due to authorization error - check deploy permissions and secret scopes [code: 10021]

[hkbertoson]

It's also not available if you generate an API token on the dashboard.

[ashubham]

+1 not able to use it with worker and deploying via cloudflare

[ajdiyassin]

Yes! i got this working when deploying workers with secrets store. I had to re run:

wrangler login

[leeloo1]

my worker code is directly connected to a git repository for automatic builds and deployments, but if I try to add bindings <secrets_store_secrets> to my wrangler.jsonc config, then I also get this error during the automatic build (that starts automatically after checkin). Whats missing?

[ERROR] A request to the Cloudflare API (....workers/scripts/api-gateway/versions) failed.
failed to fetch secrets store binding due to authorization error - check deploy permissions and secret scopes [code: 10021]

[penalosa]

Could you try adding edit level access to your API token? This may be a bug, but it'd be good to see if that works.

[leeloo1]

@penalosa indeed it works by setting edit permission on secret store manually