pc-heini/HeiniRemote-AgentFlatpak
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 13 Wiki Activity

ci: use the existing user-wide REGISTRY_TOKEN for repo access
Build and Publish HeiniRemote Agent Flatpak / build (push) Failing after 4m15s
Details

Browse Source 
The default GITHUB_TOKEN is scoped to this repo only and cannot clone the
private upstream HeiniRemote. Reuse the user-wide write PAT (REGISTRY_TOKEN)
that the other repos' actions already rely on, instead of requiring a new
per-repo secret.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
pc-heiniandClaude Fable 5 committed 2026-07-07 02:48:14 +02:00
1 parent 598eea7ee6
commit fa40edb680
1 file changed
+11 -5
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build-flatpak.yml
+11 -5
View File
@@ -50,9 +50,15 @@ jobs:
# Plain git clone instead of actions/checkout@v4: the bare ubuntu image # Plain git clone instead of actions/checkout@v4: the bare ubuntu image
# has no Node.js, so JavaScript actions fail with exit 127. # has no Node.js, so JavaScript actions fail with exit 127.
#
# REGISTRY_TOKEN is the user-wide write PAT the other repos' actions
# already use. It is required (not just preferred): the auto-provided
# GITHUB_TOKEN is scoped to THIS repo only, so it cannot clone the
# private upstream HeiniRemote. The GITHUB_TOKEN fallback exists just so
# the own-repo steps still work if the secret is ever unset.
- name: Checkout - name: Checkout
env: env:
TOKEN: ${{ secrets.PUBLISH_TOKEN != '' && secrets.PUBLISH_TOKEN || secrets.GITHUB_TOKEN }} TOKEN: ${{ secrets.REGISTRY_TOKEN != '' && secrets.REGISTRY_TOKEN || secrets.GITHUB_TOKEN }}
run: | run: |
AUTH_URL="$(echo "${GITHUB_SERVER_URL}" | sed "s#://#://${GITHUB_ACTOR}:${TOKEN}@#")/${GITHUB_REPOSITORY}.git" AUTH_URL="$(echo "${GITHUB_SERVER_URL}" | sed "s#://#://${GITHUB_ACTOR}:${TOKEN}@#")/${GITHUB_REPOSITORY}.git"
git init -q git init -q
@@ -64,7 +70,7 @@ jobs:
- name: Resolve upstream HeiniRemote version - name: Resolve upstream HeiniRemote version
id: ver id: ver
env: env:
TOKEN: ${{ secrets.PUBLISH_TOKEN != '' && secrets.PUBLISH_TOKEN || secrets.GITHUB_TOKEN }} TOKEN: ${{ secrets.REGISTRY_TOKEN != '' && secrets.REGISTRY_TOKEN || secrets.GITHUB_TOKEN }}
run: | run: |
chmod +x scripts/*.sh chmod +x scripts/*.sh
export UPSTREAM_URL="$(echo "${GITHUB_SERVER_URL}" | sed "s#://#://${GITHUB_ACTOR}:${TOKEN}@#")/pc-heini/HeiniRemote.git" export UPSTREAM_URL="$(echo "${GITHUB_SERVER_URL}" | sed "s#://#://${GITHUB_ACTOR}:${TOKEN}@#")/pc-heini/HeiniRemote.git"
@@ -100,7 +106,7 @@ jobs:
- name: Build agent from upstream source - name: Build agent from upstream source
if: steps.check.outputs.build == 'true' if: steps.check.outputs.build == 'true'
env: env:
TOKEN: ${{ secrets.PUBLISH_TOKEN != '' && secrets.PUBLISH_TOKEN || secrets.GITHUB_TOKEN }} TOKEN: ${{ secrets.REGISTRY_TOKEN != '' && secrets.REGISTRY_TOKEN || secrets.GITHUB_TOKEN }}
run: | run: |
UPSTREAM_URL="$(echo "${GITHUB_SERVER_URL}" | sed "s#://#://${GITHUB_ACTOR}:${TOKEN}@#")/pc-heini/HeiniRemote.git" UPSTREAM_URL="$(echo "${GITHUB_SERVER_URL}" | sed "s#://#://${GITHUB_ACTOR}:${TOKEN}@#")/pc-heini/HeiniRemote.git"
# init+fetch instead of clone: works for tags and bare commit shas alike. # init+fetch instead of clone: works for tags and bare commit shas alike.
@@ -151,7 +157,7 @@ jobs:
- name: Publish OSTree repo to the 'pages' branch - name: Publish OSTree repo to the 'pages' branch
if: steps.check.outputs.build == 'true' if: steps.check.outputs.build == 'true'
env: env:
TOKEN: ${{ secrets.PUBLISH_TOKEN != '' && secrets.PUBLISH_TOKEN || secrets.GITHUB_TOKEN }} TOKEN: ${{ secrets.REGISTRY_TOKEN != '' && secrets.REGISTRY_TOKEN || secrets.GITHUB_TOKEN }}
run: | run: |
AUTH_URL="$(echo "${{ github.server_url }}" | sed "s#://#://${{ github.actor }}:${TOKEN}@#")/${{ github.repository }}.git" AUTH_URL="$(echo "${{ github.server_url }}" | sed "s#://#://${{ github.actor }}:${TOKEN}@#")/${{ github.repository }}.git"
rm -rf publish && mkdir publish && cd publish rm -rf publish && mkdir publish && cd publish
@@ -169,7 +175,7 @@ jobs:
- name: Tag and release the published version - name: Tag and release the published version
if: steps.check.outputs.build == 'true' if: steps.check.outputs.build == 'true'
env: env:
TOKEN: ${{ secrets.PUBLISH_TOKEN != '' && secrets.PUBLISH_TOKEN || secrets.GITHUB_TOKEN }} TOKEN: ${{ secrets.REGISTRY_TOKEN != '' && secrets.REGISTRY_TOKEN || secrets.GITHUB_TOKEN }}
GITEA_API: ${{ github.server_url }}/api/v1/repos/${{ github.repository }} GITEA_API: ${{ github.server_url }}/api/v1/repos/${{ github.repository }}
run: | run: |
AUTH_URL="$(echo "${{ github.server_url }}" | sed "s#://#://${{ github.actor }}:${TOKEN}@#")/${{ github.repository }}.git" AUTH_URL="$(echo "${{ github.server_url }}" | sed "s#://#://${{ github.actor }}:${TOKEN}@#")/${{ github.repository }}.git"