Skip to content

fix(ci): disable checkout credential persistence in render-template - #35

Merged
wgordon17 merged 1 commit into
gordon-code:mainfrom
wgordon17:fix/render-template-persist-credentials
Oct 18, 2026
Merged

wgordon17 merged 1 commit into
gordon-code:mainfrom
wgordon17:fix/render-template-persist-credentials

Conversation

@wgordon17

Copy link
Copy Markdown
Member

Summary

  • Sets persist-credentials: false on actions/checkout in .github/workflows/render-template.yaml so GITHUB_TOKEN is not written to .git/config's http.https://github.com/.extraheader
  • Ensures the re-render commit push authenticates with khepri-bot[bot]'s installation token (GH_TOKEN) rather than github-actions[bot], preventing downstream PR Checks runs from being blocked with action_required

@wgordon17
wgordon17 marked this pull request as ready for review October 18, 2026 19:58
@wgordon17
wgordon17 requested a review from a team October 18, 2026 19:58
@wgordon17
wgordon17 merged commit 6db5e24 into gordon-code:main Oct 18, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant