agw/jasp-desktop-bin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Rename GITEA_TOKEN secret to STATE_PUSH_TOKEN

Browse Source 
Gitea rejects secret names starting with the reserved GITEA_ prefix.
This commit is contained in:
agw
2026-09-01 21:20:00 +02:00
parent 92961bd7b3
commit 3ad88f9b0d
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build.yml
+1 -1
View File
@@ -121,7 +121,7 @@ jobs:
- name: Record built state - name: Record built state
env: env:
GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }} STATE_PUSH_TOKEN: ${{ secrets.STATE_PUSH_TOKEN }}
run: bash scripts/record-state.sh run: bash scripts/record-state.sh
- name: Clean up build tree - name: Clean up build tree
README.md
+1 -1
View File
@@ -77,7 +77,7 @@ Set these in the Gitea repo before the first run.
| --- | --- | | --- | --- |
| `GH_TOKEN` | GitHub PAT with `contents: write` on the release repo | | `GH_TOKEN` | GitHub PAT with `contents: write` on the release repo |
| `AUR_SSH_PRIVATE_KEY` | Private SSH key registered with your AUR account. Copy the value already set on `agw/pi3-smart-workspace`. | | `AUR_SSH_PRIVATE_KEY` | Private SSH key registered with your AUR account. Copy the value already set on `agw/pi3-smart-workspace`. |
| `GITEA_TOKEN` | Token with write access to this repo, for committing `state.json` | | `STATE_PUSH_TOKEN` | Gitea token with write access to this repo, for committing `state.json`. (Gitea reserves the `GITEA_` secret prefix.) |
The GitHub repo `GH_OWNER/GH_REPO` must exist and be public — the AUR PKGBUILD The GitHub repo `GH_OWNER/GH_REPO` must exist and be public — the AUR PKGBUILD
downloads the tarball from its releases, so it has to be reachable anonymously. downloads the tarball from its releases, so it has to be reachable anonymously.
scripts/record-state.sh
+3 -3
View File
@@ -2,11 +2,11 @@
# Commit state.json back to this repo so the next scheduled run knows what was # Commit state.json back to this repo so the next scheduled run knows what was
# already built. Without this the daily check would rebuild every night. # already built. Without this the daily check would rebuild every night.
# #
# GITEA_TOKEN token with write access to this repo (required) # STATE_PUSH_TOKEN token with write access to this repo (required)
set -euo pipefail set -euo pipefail
: "${GITEA_TOKEN:?GITEA_TOKEN is required}" : "${STATE_PUSH_TOKEN:?STATE_PUSH_TOKEN is required}"
python3 - <<'PY' python3 - <<'PY'
import json import json
@@ -40,6 +40,6 @@ git commit -m "Record build of ${GITHUB_REF_NAME:-build}: $(python3 -c 'import j
origin="$(git remote get-url origin)" origin="$(git remote get-url origin)"
host_path="${origin#*://}" host_path="${origin#*://}"
host_path="${host_path#*@}" host_path="${host_path#*@}"
git push "https://x-access-token:${GITEA_TOKEN}@${host_path}" HEAD:"${GITHUB_REF_NAME:-master}" git push "https://x-access-token:${STATE_PUSH_TOKEN}@${host_path}" HEAD:"${GITHUB_REF_NAME:-master}"
echo ":: state recorded" echo ":: state recorded"