From 3a4f2c01019f646ae8099e61240e72be2c1df2a1 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 10 Apr 2026 06:36:59 +0000 Subject: [PATCH] fix: keep GITHUB_TOKEN/CODEBERG_TOKEN secrets in release vault action formulas/release.sh still uses API tokens for mirror pushes. Add mounts alongside secrets rather than replacing them, so both the .sh (token) and .toml (SSH) formula paths work. Co-Authored-By: Claude Opus 4.6 (1M context) --- lib/release.sh | 2 +- vault/examples/release.toml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/release.sh b/lib/release.sh index 8217f5e..9ddf2bd 100644 --- a/lib/release.sh +++ b/lib/release.sh @@ -96,7 +96,7 @@ disinto_release() { id = "${id}" formula = "release" context = "Release ${version}" -secrets = [] +secrets = ["GITHUB_TOKEN", "CODEBERG_TOKEN"] mounts = ["ssh"] EOF diff --git a/vault/examples/release.toml b/vault/examples/release.toml index 8e3952f..6c3e612 100644 --- a/vault/examples/release.toml +++ b/vault/examples/release.toml @@ -27,7 +27,7 @@ id = "release-v120" formula = "release" context = "Release v1.2.0 — includes vault redesign, .profile system, architect agent" -secrets = [] +secrets = ["GITHUB_TOKEN", "CODEBERG_TOKEN"] mounts = ["ssh"] # Optional: specify a larger model for complex release logic