From ce5d59f45ceb33b7272093dedcfb89fcd116b479 Mon Sep 17 00:00:00 2001 From: Jeff Emmett Date: Wed, 1 Apr 2026 13:04:42 -0700 Subject: [PATCH] ci: use REPO_READ_TOKEN for cross-repo encryptid-sdk clone REGISTRY_TOKEN lacks read:repository scope. Co-Authored-By: Claude Opus 4.6 --- .gitea/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index b4c181a..49be131 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -31,7 +31,7 @@ jobs: - name: Build and push image run: | - git clone --depth 1 http://${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_TOKEN }}@server:3000/jeffemmett/encryptid-sdk.git ../encryptid-sdk + git clone --depth 1 http://jeffemmett:${{ secrets.REPO_READ_TOKEN }}@server:3000/jeffemmett/encryptid-sdk.git ../encryptid-sdk docker build -f Dockerfile -t ${{ env.IMAGE }}:${{ env.IMAGE_TAG }} -t ${{ env.IMAGE }}:latest .. echo "${{ secrets.REGISTRY_TOKEN }}" | docker login ${{ env.REGISTRY }} -u ${{ secrets.REGISTRY_USER }} --password-stdin docker push ${{ env.IMAGE }}:${{ env.IMAGE_TAG }}