From 40c2d473b926b132b105640761ad0da0ec707d06 Mon Sep 17 00:00:00 2001
From: FaulMit <48646918+FaulMit@users.noreply.github.com>
Date: Fri, 21 Aug 2026 15:28:28 +0200
Subject: [PATCH] Authenticate FFmpeg metadata requests

---
 .github/workflows/ci.yml            | 2 ++
 .github/workflows/release.yml       | 2 ++
 .github/workflows/store-release.yml | 2 ++
 tools/AcquireFfmpegRuntime.ps1      | 8 +++++++-
 4 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a26d2c2..5cbca0b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -43,6 +43,8 @@ jobs:
 
       - name: Build Release
         shell: pwsh
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
         run: |
           dotnet restore ./src/Captail/Captail.csproj --locked-mode
           dotnet build ./Captail.sln -c Release --no-restore `
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index da2709a..c31a5bb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -125,6 +125,8 @@ jobs:
 
       - name: Build release packages
         shell: pwsh
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
         run: |
           dotnet restore ./src/Captail/Captail.csproj --locked-mode
           ./tools/BuildRelease.ps1 `
diff --git a/.github/workflows/store-release.yml b/.github/workflows/store-release.yml
index 66f2184..4a89bb3 100644
--- a/.github/workflows/store-release.yml
+++ b/.github/workflows/store-release.yml
@@ -63,6 +63,8 @@ jobs:
 
       - name: Build Microsoft Store package
         shell: pwsh
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
         run: |
           ./tools/BuildStorePackage.ps1 `
             -Version $env:RELEASE_VERSION `
diff --git a/tools/AcquireFfmpegRuntime.ps1 b/tools/AcquireFfmpegRuntime.ps1
index b9559cb..9373613 100644
--- a/tools/AcquireFfmpegRuntime.ps1
+++ b/tools/AcquireFfmpegRuntime.ps1
@@ -17,10 +17,16 @@ else {
     "ffmpeg-$version-win64-lgpl-shared-8.1.zip"
 }
 $releaseApiUrl = "https://api.github.com/repos/BtbN/FFmpeg-Builds/releases/tags/latest"
-$release = Invoke-RestMethod -UseBasicParsing -Uri $releaseApiUrl -Headers @{
+$githubHeaders = @{
     Accept = "application/vnd.github+json"
     "User-Agent" = "Captail-build"
 }
+$githubToken = [Environment]::GetEnvironmentVariable("GITHUB_TOKEN")
+if (-not [string]::IsNullOrWhiteSpace($githubToken)) {
+    $githubHeaders.Authorization = "Bearer $githubToken"
+}
+$release = Invoke-RestMethod -UseBasicParsing -Uri $releaseApiUrl `
+    -Headers $githubHeaders
 $asset = $release.assets | Where-Object { $_.name -eq $archiveName } |
     Select-Object -First 1
 if (-not $asset) {