Use personal access token securely for VRT update workflow push (#6356)

* Use personal access token securely for VRT update workflow push

* Update button label from 'Apply budget template' to 'Overwrite budget template' in mobile budget menu modal for consistency with recent changes.

* Update button label from 'Overwrite budget template' to 'Overwrite with template' in mobile budget menu modal for clarity and consistency.
This commit is contained in:
Matiss Janis Aboltins
2025-12-10 19:25:07 +00:00
committed by GitHub
parent 962fe44772
commit 6f76b67da7
3 changed files with 11 additions and 1 deletions

View File

@@ -121,7 +121,11 @@ jobs:
env:
HEAD_REF: ${{ steps.metadata.outputs.head_ref }}
HEAD_REPO: ${{ steps.metadata.outputs.head_repo }}
GITHUB_TOKEN: ${{ secrets.ACTIONS_UPDATE_TOKEN }}
run: |
# Configure git to use the token via credential helper (avoids token in URLs/logs)
git config --local credential.helper '!f() { echo "username=x-access-token"; echo "password=${GITHUB_TOKEN}"; }; f'
git remote set-url origin "https://github.com/${HEAD_REPO}.git"
git push origin "HEAD:refs/heads/$HEAD_REF"
echo "Successfully pushed VRT updates to $HEAD_REPO@$HEAD_REF"