fix

1 files changed, 12 insertions, 2 deletions

diff --git a/.forgejo/workflows/kernel-update-check.yml b/.forgejo/workflows/kernel-update-check.yml
index 5e7e16d..32d4962 100644
--- a/.forgejo/workflows/kernel-update-check.yml
+++ b/.forgejo/workflows/kernel-update-check.yml
@@ -85,11 +85,16 @@ jobs:
           NEW_MAJOR: ${{ steps.check.outputs.MAJOR }}
           NEW_MINOR: ${{ steps.check.outputs.MINOR }}
           NEW_TAGREL: ${{ steps.check.outputs.TAGREL }}
+          FORGEJO_TOKEN: ${{ secrets.FORGEJO_TOKEN }}
         run: |
           set -euo pipefail
           BRANCH="update/kernel-${NEW_MAJOR}.${NEW_MINOR}-${NEW_TAGREL}"
+          HDRFILE=$(mktemp)
+          chmod 600 "$HDRFILE"
+          trap 'rm -f "$HDRFILE"' EXIT
+          printf 'Authorization: token %s\n' "$FORGEJO_TOKEN" > "$HDRFILE"
           OPEN_PRS=$(curl -fsSL \
-            -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
+            -H "@${HDRFILE}" \
             "https://git.rp1.hu/api/v1/repos/${{ github.repository }}/pulls?state=open&limit=50")
           EXISTS=$(echo "$OPEN_PRS" | python3 -c "
           import sys, json
@@ -111,6 +116,7 @@ jobs:
           OLD_MAJOR: ${{ steps.current.outputs.MAJOR }}
           OLD_MINOR: ${{ steps.current.outputs.MINOR }}
           OLD_TAGREL: ${{ steps.current.outputs.TAGREL }}
+          FORGEJO_TOKEN: ${{ secrets.FORGEJO_TOKEN }}
         run: |
           set -euo pipefail
 
@@ -152,8 +158,12 @@ jobs:
 
           git push origin "$BRANCH"
 
+          HDRFILE=$(mktemp)
+          chmod 600 "$HDRFILE"
+          trap 'rm -f "$HDRFILE"' EXIT
+          printf 'Authorization: token %s\n' "$FORGEJO_TOKEN" > "$HDRFILE"
           curl -fsSL -X POST \
-            -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
+            -H "@${HDRFILE}" \
             -H "Content-Type: application/json" \
             "https://git.rp1.hu/api/v1/repos/${{ github.repository }}/pulls" \
             -d "{