ci: upload the Arch package with a package token, since the registry rejects the job token #21

Merged
tri merged 1 commits from ci/arch-package-token into main 2026-11-14 02:42:32 +07:00
+3 -2
View File
@@ -13,7 +13,6 @@ on:
permissions: permissions:
contents: read contents: read
packages: write
jobs: jobs:
package: package:
@@ -49,7 +48,9 @@ jobs:
su builder -c "cd $dir && makepkg --noconfirm" su builder -c "cd $dir && makepkg --noconfirm"
- name: Publish - name: Publish
env: env:
TOKEN: ${{ secrets.GITHUB_TOKEN }} # The package registry rejects the job token, so this is a personal access token
# with the write:package scope.
TOKEN: ${{ secrets.PACKAGE_TOKEN }}
run: | run: |
for f in /tmp/pkg/qtpotato-[0-9]*.pkg.tar.zst; do for f in /tmp/pkg/qtpotato-[0-9]*.pkg.tar.zst; do
curl -fsS -X PUT -H "Authorization: token $TOKEN" --upload-file "$f" \ curl -fsS -X PUT -H "Authorization: token $TOKEN" --upload-file "$f" \