iso.yml: don't hand Forgejo's token to just's installer
Some checks failed
Installer ISO / iso (push) Failing after 33s

The installer sends $GITHUB_TOKEN to GitHub; in a Forgejo job that's
Forgejo's own token, so GitHub refused the download (410).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Philip Peterson 2026-10-30 03:56:17 -08:00
parent b744a378e4
commit a4452530e0

View file

@ -43,7 +43,9 @@ jobs:
curl -fsSL https://taskfile.dev/install.sh | sh -s -- -d -b "$HOME/.local/bin"
# --force: on a host-mode runner $HOME outlives the job, and
# just's installer won't overwrite the previous run's binary.
curl -fsSL https://just.systems/install.sh | bash -s -- --force --to "$HOME/.local/bin"
# env -u: the installer sends $GITHUB_TOKEN to GitHub, and here
# that's Forgejo's token, which GitHub rejects (401/410).
curl -fsSL https://just.systems/install.sh | env -u GITHUB_TOKEN bash -s -- --force --to "$HOME/.local/bin"
curl -fsSL -o "$HOME/.local/bin/yq" https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64
curl -fsSL -o "$HOME/.local/bin/cosign" https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64
chmod +x "$HOME/.local/bin/yq" "$HOME/.local/bin/cosign"