[BUG]: github_actions_organization_permissions has incorrect import behavior when allowed_actions_cofig is managed by enterprise actions permissions

[MatthewHou]

Expected Behavior

When allowed_actions_config is managed at enterprise level by resource github_enterprise_actions_permissions, the allowed_actions_config block should not be included in the state attribute when importing the organizational level resource github_actions_organization_permissions

Actual Behavior

In the tf state forgithub_actions_organization_permissions, the allowed_actions_config block is populated with data inherited from github_enterprise_actions_permissions . As a result, github_actions_organization_permissions will try to set the permissions managed at the enterprise level. API returns 409 error during apply.

This seems to be a symptom similar to #2182, but caused by import

Terraform Version

Terraform v1.9.4
on windows_amd64

• provider registry.terraform.io/hashicorp/aws v5.63.0
• provider registry.terraform.io/integrations/github v6.2.

Affected Resource(s)

• github_actions_organization_permissions

Terraform Configuration Files

resource "github_enterprise_actions_permissions" "enterprise_actions_permissions" {
  enterprise_slug = "test"
  allowed_actions = "selected"
  enabled_organizations = "all"
   dynamic "allowed_actions_config" {
    for_each = var.actions_allowed_actions == "selected" ? ["selected"] : []
    content {
      github_owned_allowed = true
      verified_allowed     = true
      patterns_allowed = ["actions/checkout@v3" ]
    }
  }
}

resource "github_actions_organization_permissions" "organization_actions_permissions" {
  allowed_actions = "selected"
 

  repository_ids =[1000]
 
}

Steps to Reproduce

terraform import github_actions_organization_permissions.organization_actions_permissions <org_name>

Then make some changes to the actions org permissions, ie add a new id to repository_ids list

terrafrom plan
terraform apply

The apply will fail with error

╷
│ Error: PUT https://<host>/api/v3/orgs/<org>/actions/permissions/selected-actions: 409  []
│   ....
│   20: resource "github_actions_organization_permissions" "organization_actions_permissions" {
│

I was able to work around this by editing the allowed_actions_config attribute for this resource to [] in the tfstate file.

Debug Output

No response

Panic Output

No response

Code of Conduct

• I agree to follow this project's Code of Conduct