cicd: ci v1.0.76 — the git.hanzo.ai reads take their own credential

v1.0.75 read the document with github.token, the per-job token, which is scoped
to the repo running the job and answers 404 for a private repo in another org.
Both reads in that lane cross one. The 404 read as a missing document rather
than a refused credential.

v1.0.76 gives those reads their own KMS-sealed HANZO_GIT_TOKEN and says so by
name when it is absent, so the next failure names its own remedy.

Co-authored-by: Hanzo Dev <[email protected]>
This commit is contained in:
2026-08-19 23:20:38 -07:00
co-authored by Hanzo Dev
parent 7b80afeb4a
commit f50ef05473
+1 -1
View File
@@ -58,7 +58,7 @@ on:
default: ''
jobs:
cicd:
uses: hanzoai/ci/.hanzo/workflows/[email protected]5
uses: hanzoai/ci/.hanzo/workflows/[email protected]6
with:
spec-ref: ${{ github.event.inputs.spec-ref || '' }}
spec-sha256: ${{ github.event.inputs.spec-sha256 || '' }}