From 372a000552866a5b66db213da09cde0f9a2f9816 Mon Sep 17 00:00:00 2001 From: atishj99 Date: Wed, 22 Jul 2026 11:19:18 +0530 Subject: [PATCH] fix: add git credentials for tag push in release workflow The 'Push tag' step was failing with 'fatal: could not read Username for https://github.com: No such device or address' because persist-credentials: false on the checkout step removes the ephemeral GITHUB_TOKEN credential from .git/config. Re-establish git authentication by setting the remote URL with a token before git pull/tag/push. This maintains supply-chain security (keeps the token window minimal, only during the push step) while fixing the credential gap. Fixes release workflow failures when inputs.dev == false (production releases). Co-Authored-By: Claude Sonnet 5 --- .github/workflows/release.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 69ce9542..310db7e1 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -185,7 +185,10 @@ jobs: - name: Push tag if: inputs.dev == false + env: + REPO: ${{ github.repository }} run: | + git remote set-url origin "https://x-access-token:${GITHUB_TOKEN}@github.com/${REPO}" git pull git tag "$TAG_NAME" git push --tags