From 0b0a5cde6ca6663e9ea01f246a919ad15447a9a4 Mon Sep 17 00:00:00 2001
From: sam <sam@geyskens.eu>
Date: Mon, 13 Jul 2026 13:25:37 +0200
Subject: [PATCH] CI: pass explicit PAT to checkout (Gitea auto-token 403 on
 private repo)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .gitea/workflows/build.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 9ff5089..3daef12 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -18,6 +18,10 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          # Gitea's auto Actions-token returned 403 on the private repo checkout;
+          # use an explicit PAT (repo read) provided as the CI_TOKEN secret.
+          token: ${{ secrets.CI_TOKEN }}
 
       - name: Herstel signing keystore uit secret
         run: |