Skip to content

Commit ad5e491

Browse files
committed
Drop SSH push-back detour from inline github_ci_uv.yml template
The inline uv CI template was half-migrated to the GITHUB_TOKEN+HTTPS push-back: the publish job already checks out with token + has contents: write, but kept a 'Force SSH for git remote' step (rewriting origin to an SSH URL) and an ssh-private-key input on git-commit, which together override the token credentials and reintroduce the original push-back failure on any repo without an SSH_PRIVATE_KEY deploy key. Remove both remnants so the inline template matches the working reusable workflow (.github/workflows/uv-ci.yml), and add a comment warning against re-adding the SSH override. git-commit's ssh-agent step is already gated on inputs.ssh-private-key, so a plain HTTPS push results. Refs #43
1 parent b4bf78d commit ad5e491

1 file changed

Lines changed: 7 additions & 4 deletions

File tree

wads/data/github_ci_uv.yml

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -180,6 +180,13 @@ jobs:
180180
runs-on: ubuntu-latest
181181

182182
steps:
183+
# `actions/checkout@v6` defaults to persist-credentials: true, configuring
184+
# HTTPS auth in .git/config using `secrets.GITHUB_TOKEN`. Together with the
185+
# job-level `permissions: contents: write`, this is exactly what the
186+
# post-publish push-back needs — no per-repo SSH deploy key required. Do
187+
# NOT re-add a "Force SSH for git remote" step: rewriting origin to an
188+
# SSH URL overrides these credentials and reintroduces the push-back
189+
# failure on every repo lacking an SSH_PRIVATE_KEY deploy key.
183190
- uses: actions/checkout@v6
184191
with:
185192
fetch-depth: 0
@@ -217,14 +224,10 @@ jobs:
217224
with:
218225
pypi-token: ${{ secrets.PYPI_PASSWORD }}
219226

220-
- name: Force SSH for git remote
221-
run: git remote set-url origin git@github.com:${{ github.repository }}.git
222-
223227
- name: Commit Changes
224228
uses: i2mint/wads/actions/git-commit@master
225229
with:
226230
commit-message: "**CI** Formatted code + Updated version to ${{ env.VERSION }} [skip ci]"
227-
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
228231
push: true
229232

230233
- name: Tag Repository

0 commit comments

Comments
 (0)