fix: Explicitly use SYNC_TOKEN for GitHub authentication

xesrevinu · Oct 10, 2024 · 5d5f0c4 · 5d5f0c4
1 parent 424f1b6
commit 5d5f0c4
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 2 deletions.
diff --git a/action.yml b/action.yml
@@ -7,7 +7,7 @@ branding:
 inputs:
   sync_token:
     description: 'Token for the repo. Can be passed in using $\{{ secrets.SYNC_TOKEN }}'
-    required: true
+    required: false
   github_token:
     description: 'Token for the repo. Can be passed in using $\{{ secrets.GITHUB_TOKEN }}'
     required: true

diff --git a/src/entrypoint.sh b/src/entrypoint.sh
@@ -157,6 +157,11 @@ function git_init() {
     ssh-keyscan -t rsa "${source_repo_hostname}" >> "${HOME}"/.ssh/known_hosts
   else
     info "the source repository is located within GitHub."
+    if [[ "${SYNC_TOKEN}" ]]; then
+      # clear GITHUB_TOKEN
+      unset GITHUB_TOKEN
+      gh auth login --with-token <<< "${SYNC_TOKEN}"
+    fi
     gh auth setup-git --hostname "${source_repo_hostname}"
     gh auth status --hostname "${source_repo_hostname}"
   fi

diff --git a/src/sync_template.sh b/src/sync_template.sh
@@ -300,7 +300,7 @@ function push () {
 function switch_to_github_token_auth() {
   info "Switching to GITHUB_TOKEN for authentication"
   gh auth logout
-  echo "$GITHUB_TOKEN" | gh auth login --with-token
+  gh auth login --with-token <<< "${GITHUB_TOKEN}"
 }
 
 ####################################