From be1f64a2566975149494b68049c43f73b6ac571e Mon Sep 17 00:00:00 2001
From: Alexander Renz <renz@uuxo.net>
Date: Sat, 13 Dec 2025 16:11:26 +0100
Subject: [PATCH] fix(ci): use env var for secret

---
 .gitea/workflows/ci.yml | 16 ++++++----------
 1 file changed, 6 insertions(+), 10 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 14637d1..ff4e9c9 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -206,20 +206,16 @@ jobs:
           fetch-depth: 0
 
       - name: Push to GitHub
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUBMIRRORTOKEN }}
         run: |
-          echo "Checking if token is set..."
-          if [ -z "${{ secrets.GITHUBMIRRORTOKEN }}" ]; then
+          echo "Starting mirror..."
+          if [ -z "${GITHUB_TOKEN}" ]; then
             echo "ERROR: GITHUBMIRRORTOKEN secret is empty!"
             exit 1
           fi
-          echo "Token is set, length: ${#GITHUB_TOKEN}"
-          git remote -v
-          git remote add github https://x-access-token:${{ secrets.GITHUBMIRRORTOKEN }}@github.com/PlusOne/hmac-file-server.git
-          git remote -v
-          echo "Pushing branches..."
+          echo "Token length: ${#GITHUB_TOKEN}"
+          git remote add github "https://x-access-token:${GITHUB_TOKEN}@github.com/PlusOne/hmac-file-server.git"
           git push --force --all github
-          echo "Pushing tags..."
           git push --force --tags github
           echo "Mirror complete!"
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUBMIRRORTOKEN }}