Steve Dudenhoeffer 18de9b8ebc fix: source GITEA_TOKEN from github.token (auto) under explicit secret forwarding ...

The first attempt failed at entrypoint.sh:61 'GITEA_TOKEN required' — with
explicit secrets (no `inherit`), secrets.GITEA_TOKEN resolves empty in the
reusable job. github.token comes from the github context (not a forwarded
secret), so it's present regardless. The forwarded provider/findings secrets
arrived correctly; only the auto-token sourcing was wrong.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-27 20:53:00 -04:00

..

adversarial-review.yml

security: scope reusable-workflow secrets (least privilege) over secrets: inherit

2026-06-27 20:45:18 -04:00

build-image.yml

ci: skip image rebuild on docs/example-only changes (paths-ignore)

2026-06-25 19:10:24 -04:00

review-reusable.yml

fix: source GITEA_TOKEN from github.token (auto) under explicit secret forwarding

2026-06-27 20:53:00 -04:00