From 58f9141b7a0923048fb013d8c9ca993b25c1340e Mon Sep 17 00:00:00 2001 From: Yuriy Kirillov Date: Mon, 24 Aug 2026 15:49:12 +0200 Subject: [PATCH] fix: pass GH_TOKEN to deploy-shared.yml's deploy step deploy/deploy.py resolves and downloads release refs via the gh CLI (deploy/resolve.py), which needs GH_TOKEN/GITHUB_TOKEN in its environment. Every other job that shells out to gh (upload-apps, encrypt) already passes a token explicitly to its action; the deploy step never did, so every real deploy failed at ref resolution: "Could not resolve GitHub latest release ... set the GH_TOKEN environment variable." Co-Authored-By: Claude Sonnet 5 --- .github/workflows/deploy-shared.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/deploy-shared.yml b/.github/workflows/deploy-shared.yml index 705a52c..c2e84a9 100644 --- a/.github/workflows/deploy-shared.yml +++ b/.github/workflows/deploy-shared.yml @@ -82,6 +82,7 @@ jobs: DEPLOY_PATH: ${{ inputs.path }} KEEP_RELEASES: ${{ inputs.keep-releases }} SOPS_AGE_KEY: ${{ secrets.sops-age-key }} + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} run: | jq -n \ --argjson hosts "$HOSTS" \