Harden Gitea workflows for monero_c releases

2026-04-09 11:41:20 +02:00
parent 5e90cedb27
commit ddd7d5edea
4 changed files with 65 additions and 16 deletions
@@ -1,4 +1,5 @@
 name: build
+run-name: build ${{ inputs.flavor || 'peya' }}

 on:
  workflow_dispatch:
@@ -56,16 +57,20 @@ jobs:
      - name: Configure Gitea auth for private submodules
        env:
          MONERO_C_GITEA_PAT: ${{ secrets.MONERO_C_GITEA_PAT }}
+          PEYA_GITEA_PAT: ${{ secrets.PEYA_GITEA_PAT }}
+          GITEA_PAT: ${{ secrets.GITEA_PAT }}
        run: |
          set -euo pipefail

-          if [ "${FLAVOR}" != "monero" ] && [ -z "${MONERO_C_GITEA_PAT:-}" ]; then
-            echo "Missing MONERO_C_GITEA_PAT secret for private ${FLAVOR} submodule"
+          AUTH_TOKEN="${MONERO_C_GITEA_PAT:-${PEYA_GITEA_PAT:-${GITEA_PAT:-}}}"
+
+          if [ "${FLAVOR}" != "monero" ] && [ -z "${AUTH_TOKEN}" ]; then
+            echo "Missing Gitea PAT secret for private ${FLAVOR} submodule"
            exit 1
          fi

-          if [ -n "${MONERO_C_GITEA_PAT:-}" ]; then
-            git config --global url."http://tiamak:${MONERO_C_GITEA_PAT}@54.38.205.168:3000/".insteadOf "http://54.38.205.168:3000/"
+          if [ -n "${AUTH_TOKEN}" ]; then
+            git config --global url."http://tiamak:${AUTH_TOKEN}@54.38.205.168:3000/".insteadOf "http://54.38.205.168:3000/"
          fi

          git submodule sync