From e3a4c0e2a82e729717edbd3825d713ed350f68d9 Mon Sep 17 00:00:00 2001 From: Jammy2211 Date: Fri, 21 Aug 2026 17:45:10 -0400 Subject: [PATCH] fix: push the filing branch with the job token explicitly MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Second live run (#50): gate green, commit made, but git push hit 'Invalid username or token' — claude-code-action rewires the checkout's persisted credentials for its own short-lived OIDC token. Push via an explicit x-access-token URL with the job's GITHUB_TOKEN instead of relying on ambient credential state. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01K21CJX9TAgULDo1fFJtonc --- .github/workflows/queue_filing.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/queue_filing.yml b/.github/workflows/queue_filing.yml index 92c209f..2b424ba 100644 --- a/.github/workflows/queue_filing.yml +++ b/.github/workflows/queue_filing.yml @@ -156,7 +156,10 @@ jobs: echo "::error::Claude produced no changes"; exit 1 fi git commit -m "queue: file paper from #${ISSUE}" - git push -u origin "$branch" + # claude-code-action rewires the checkout git credentials for its + # own short-lived OIDC token (the first live run died here with + # 'Invalid username or token') — push with the job token explicitly. + git push "https://x-access-token:${GH_TOKEN}@github.com/${GH_REPO}.git" "HEAD:refs/heads/${branch}" { echo "Files the paper requested in #${ISSUE} (label: $(cat /tmp/issue_label.txt))." echo