From a12188a7c10a50d97cf300b968deb20e083b1cd7 Mon Sep 17 00:00:00 2001
From: Michael Schiemer <kontakt@michaelschiemer.de>
Date: Fri, 31 Oct 2025 03:50:04 +0100
Subject: [PATCH] fix: rename GITEA_TOKEN to CI_TOKEN in workflows

- Change secret name from GITEA_TOKEN to CI_TOKEN
- Gitea doesn't allow secrets starting with GITEA_
- Update all checkout steps to use CI_TOKEN instead
---
 .gitea/workflows/production-deploy.yml | 18 +++++++++---------
 .gitea/workflows/security-scan.yml     |  6 +++---
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.gitea/workflows/production-deploy.yml b/.gitea/workflows/production-deploy.yml
index 1f3c6640..8344acd1 100644
--- a/.gitea/workflows/production-deploy.yml
+++ b/.gitea/workflows/production-deploy.yml
@@ -36,10 +36,10 @@ jobs:
             REF_NAME="main"
           fi
           
-          # Use Gitea token if available, otherwise try public access
-          if [ -n "${{ secrets.GITEA_TOKEN }}" ]; then
+          # Use CI token if available, otherwise try public access
+          if [ -n "${{ secrets.CI_TOKEN }}" ]; then
             git clone --depth 1 --branch "$REF_NAME" \
-              "https://${{ secrets.GITEA_TOKEN }}@git.michaelschiemer.de/${REPO}.git" \
+              "https://${{ secrets.CI_TOKEN }}@git.michaelschiemer.de/${REPO}.git" \
               /workspace/repo
           else
             # Try public HTTPS (works if repository is public)
@@ -123,10 +123,10 @@ jobs:
             REF_NAME="main"
           fi
           
-          # Use Gitea token if available, otherwise try public access
-          if [ -n "${{ secrets.GITEA_TOKEN }}" ]; then
+          # Use CI token if available, otherwise try public access
+          if [ -n "${{ secrets.CI_TOKEN }}" ]; then
             git clone --depth 1 --branch "$REF_NAME" \
-              "https://${{ secrets.GITEA_TOKEN }}@git.michaelschiemer.de/${REPO}.git" \
+              "https://${{ secrets.CI_TOKEN }}@git.michaelschiemer.de/${REPO}.git" \
               /workspace/repo
           else
             # Try public HTTPS (works if repository is public)
@@ -216,10 +216,10 @@ jobs:
             REF_NAME="main"
           fi
           
-          # Use Gitea token if available, otherwise try public access
-          if [ -n "${{ secrets.GITEA_TOKEN }}" ]; then
+          # Use CI token if available, otherwise try public access
+          if [ -n "${{ secrets.CI_TOKEN }}" ]; then
             git clone --depth 1 --branch "$REF_NAME" \
-              "https://${{ secrets.GITEA_TOKEN }}@git.michaelschiemer.de/${REPO}.git" \
+              "https://${{ secrets.CI_TOKEN }}@git.michaelschiemer.de/${REPO}.git" \
               /workspace/repo
           else
             # Try public HTTPS (works if repository is public)
diff --git a/.gitea/workflows/security-scan.yml b/.gitea/workflows/security-scan.yml
index 72a3972a..db8549ea 100644
--- a/.gitea/workflows/security-scan.yml
+++ b/.gitea/workflows/security-scan.yml
@@ -24,10 +24,10 @@ jobs:
             REF_NAME="main"
           fi
           
-          # Use Gitea token if available, otherwise try public access
-          if [ -n "${{ secrets.GITEA_TOKEN }}" ]; then
+          # Use CI token if available, otherwise try public access
+          if [ -n "${{ secrets.CI_TOKEN }}" ]; then
             git clone --depth 1 --branch "$REF_NAME" \
-              "https://${{ secrets.GITEA_TOKEN }}@git.michaelschiemer.de/${REPO}.git" \
+              "https://${{ secrets.CI_TOKEN }}@git.michaelschiemer.de/${REPO}.git" \
               /workspace/repo
           else
             # Try public HTTPS (works if repository is public)