Skip to content

Remove private module token from CI workflows#79

Merged
JAORMX merged 2 commits intomainfrom
remove-private-module-token
Mar 23, 2026
Merged

Remove private module token from CI workflows#79
JAORMX merged 2 commits intomainfrom
remove-private-module-token

Conversation

@JAORMX
Copy link
Copy Markdown
Contributor

@JAORMX JAORMX commented Mar 23, 2026

Summary

  • Remove GOPRIVATE env var and GO_MODULE_TOKEN secret usage from CI and Release workflows
  • Replace GH_TOKEN with the built-in github.token (sufficient for public repo access)
  • Remove all "Configure Git for private modules" URL rewrite steps (4 in ci.yaml, 1 in release.yaml)

go-microvm is now open source, so the private module token is no longer needed. The token was causing 401 errors in CI (fetch-runtimegh release download) because the secret has bad/expired credentials.

Test plan

  • CI build job succeeds (the fetch-runtimegh release download step uses github.token)
  • CI test and lint jobs succeed (Go modules resolve without GOPRIVATE)
  • Verify no remaining references to GO_MODULE_TOKEN in workflows

🤖 Generated with Claude Code

JAORMX and others added 2 commits March 23, 2026 11:16
go-microvm is now OSS — the GO_MODULE_TOKEN secret and GOPRIVATE
env var are no longer needed. Use the built-in github.token for
gh release downloads and drop the git URL rewrite steps.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The test created independent repos via initRepo() for both snapshot and
original, giving them different initial commit hashes. The divergence
guard (originalHEAD != baseRef) triggered, returning Skipped=0 before
any commit processing. Clone the snapshot repo instead so both share
the same base commit, matching the pattern used by all other replay
tests.

Also fix TestReplay_NoNewCommits which had the same bug but happened
to pass because the divergence guard returns the same zero values the
test asserts.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@JAORMX JAORMX merged commit 5591f14 into main Mar 23, 2026
8 checks passed
@JAORMX JAORMX deleted the remove-private-module-token branch March 23, 2026 11:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant