mirror of
https://gitea.com/gitea/runner.git
synced 2026-11-04 07:33:47 +00:00
`builtin:checkout` set the token both in its persisted credentials file and in the step's environment. git-lfs before 3.8.0 then sent `Authorization` twice on the LFS batch request, which nginx rejects with 400. Write the credentials file once the checkout succeeded, since it only serves later steps. A failed checkout no longer persists credentials. Users can also upgrade git-lfs to fix the root bug, but this fix is worth to keep regardless. Fixes: https://gitea.com/gitea/runner/issues/1370 Co-authored-by: bircni <bircni@icloud.com> Reviewed-on: https://gitea.com/gitea/runner/pulls/1371 Reviewed-by: bircni <bircni@icloud.com> Co-authored-by: silverwind <me@silverwind.io>