From 015626b65bb480f35e80adb4206d85bbb8e9f7ce Mon Sep 17 00:00:00 2001 From: Tri Vo Khac Date: Sat, 14 Nov 2026 02:42:32 +0700 Subject: [PATCH] ci: upload the Arch package with a package token, since the registry rejects the job token (#21) Co-authored-by: Tri Vo Khac --- .gitea/workflows/arch-package.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/arch-package.yml b/.gitea/workflows/arch-package.yml index 359aa5c..afb813d 100644 --- a/.gitea/workflows/arch-package.yml +++ b/.gitea/workflows/arch-package.yml @@ -13,7 +13,6 @@ on: permissions: contents: read - packages: write jobs: package: @@ -49,7 +48,9 @@ jobs: su builder -c "cd $dir && makepkg --noconfirm" - name: Publish env: - TOKEN: ${{ secrets.GITHUB_TOKEN }} + # The package registry rejects the job token, so this is a personal access token + # with the write:package scope. + TOKEN: ${{ secrets.PACKAGE_TOKEN }} run: | for f in /tmp/pkg/qtpotato-[0-9]*.pkg.tar.zst; do curl -fsS -X PUT -H "Authorization: token $TOKEN" --upload-file "$f" \