From ac5dfa3749e5844276acc45a23117de859b3ffe8 Mon Sep 17 00:00:00 2001 From: Jeff Emmett Date: Wed, 1 Apr 2026 12:30:27 -0700 Subject: [PATCH] ci: use PAT for cross-repo encryptid-sdk clone github.token is repo-scoped; use REGISTRY_TOKEN PAT for sibling repo access. Co-Authored-By: Claude Opus 4.6 --- .gitea/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index 305c58f..b4c181a 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -31,7 +31,7 @@ jobs: - name: Build and push image run: | - git clone --depth 1 http://token:${{ github.token }}@server:3000/jeffemmett/encryptid-sdk.git ../encryptid-sdk + git clone --depth 1 http://${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_TOKEN }}@server:3000/jeffemmett/encryptid-sdk.git ../encryptid-sdk docker build -f Dockerfile -t ${{ env.IMAGE }}:${{ env.IMAGE_TAG }} -t ${{ env.IMAGE }}:latest .. echo "${{ secrets.REGISTRY_TOKEN }}" | docker login ${{ env.REGISTRY }} -u ${{ secrets.REGISTRY_USER }} --password-stdin docker push ${{ env.IMAGE }}:${{ env.IMAGE_TAG }}