From 5266aa52e889bc8f0572ea6e86e574b0107d1806 Mon Sep 17 00:00:00 2001 From: pyr0ball Date: Wed, 1 Apr 2026 13:43:54 -0700 Subject: [PATCH] ci: configure Forgejo git credentials before pip install FORGEJO_TOKEN secret injected via env var (not inline expression) to avoid CI injection risk; git insteadOf redirect authenticates the git+https:// circuitforge-core VCS URL at install time. --- .github/workflows/ci.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f956e6c..1bc28dc 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,6 +22,12 @@ jobs: python-version: "3.11" cache: pip + - name: Configure git credentials for Forgejo + env: + FORGEJO_TOKEN: ${{ secrets.FORGEJO_TOKEN }} + run: | + git config --global url."https://oauth2:${FORGEJO_TOKEN}@git.opensourcesolarpunk.com/".insteadOf "https://git.opensourcesolarpunk.com/" + - name: Install dependencies run: pip install -r requirements.txt