fix(ci): authenticate XBPS repository publish

Set the existing Fenris commit identity and pass the Gitea publish token to Git without storing credentials on the runner.
2026-09-29 04:32:54 +05:30
parent 1dbe372714
commit b098132595
1 changed files with 11 additions and 0 deletions
@@ -205,8 +205,19 @@ jobs:
      - name: Publish XBPS to distribution repository
        id: publish-xbps
        if: ${{ github.event.inputs.publish_xbps == true || github.event.inputs.publish_xbps == 'true' }}
+        env:
+          GITEA_PUBLISH_TOKEN: ${{ secrets.GITEAPACKAGETOKEN }}
        run: |
          set -euo pipefail
+          if [ -z "${GITEA_PUBLISH_TOKEN}" ]; then
+            echo "::error::GITEAPACKAGETOKEN repository secret is not configured"
+            exit 1
+          fi
+          git config user.name "xavierk"
+          git config user.email "xavierk@bongbetic.com"
+          export GIT_CONFIG_COUNT=1
+          export GIT_CONFIG_KEY_0='http.https://git.bongbetic.com/.extraheader'
+          export GIT_CONFIG_VALUE_0="Authorization: token ${GITEA_PUBLISH_TOKEN}"
          VERSION=${{ steps.version.outputs.version }}
          XBPS_FILE="fenris-${VERSION}_1.x86_64.xbps"
          if [ ! -f "${XBPS_FILE}" ]; then