From b84b1b41e32ccc92a7a471ebacb4d2745995c80b Mon Sep 17 00:00:00 2001 From: Jeff Emmett Date: Wed, 1 Apr 2026 13:05:13 -0700 Subject: [PATCH] ci: use REPO_READ_TOKEN for cross-repo encryptid-sdk clone REGISTRY_TOKEN lacks read:repository scope. Co-Authored-By: Claude Opus 4.6 --- .gitea/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index 259fc87..16295b7 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -31,7 +31,7 @@ jobs: - name: Build and push image run: | - git clone --depth 1 http://${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_TOKEN }}@server:3000/jeffemmett/encryptid-sdk.git ../encryptid-sdk + git clone --depth 1 http://jeffemmett:${{ secrets.REPO_READ_TOKEN }}@server:3000/jeffemmett/encryptid-sdk.git ../encryptid-sdk docker build --build-context encryptid-sdk=../encryptid-sdk -t ${{ env.IMAGE }}:${{ env.IMAGE_TAG }} -t ${{ env.IMAGE }}:latest . echo "${{ secrets.REGISTRY_TOKEN }}" | docker login ${{ env.REGISTRY }} -u ${{ secrets.REGISTRY_USER }} --password-stdin docker push ${{ env.IMAGE }}:${{ env.IMAGE_TAG }}