From 752f2034974faaf1a4a5e97d5298a577e6ca939b Mon Sep 17 00:00:00 2001 From: Jeff Emmett Date: Wed, 1 Apr 2026 13:04:46 -0700 Subject: [PATCH] ci: use REPO_READ_TOKEN for cross-repo encryptid-sdk clone REGISTRY_TOKEN lacks read:repository scope. Co-Authored-By: Claude Opus 4.6 --- .gitea/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index 316e710..8dbc0f7 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -31,7 +31,7 @@ jobs: - name: Build and push image run: | - git clone --depth 1 http://${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_TOKEN }}@server:3000/jeffemmett/encryptid-sdk.git ../encryptid-sdk + git clone --depth 1 http://jeffemmett:${{ secrets.REPO_READ_TOKEN }}@server:3000/jeffemmett/encryptid-sdk.git ../encryptid-sdk docker build -f Dockerfile -t ${{ env.IMAGE }}:${{ env.IMAGE_TAG }} -t ${{ env.IMAGE }}:latest .. echo "${{ secrets.REGISTRY_TOKEN }}" | docker login ${{ env.REGISTRY }} -u ${{ secrets.REGISTRY_USER }} --password-stdin docker push ${{ env.IMAGE }}:${{ env.IMAGE_TAG }}