From aa11a2659e20862a3563a263cb8d651a138ca913 Mon Sep 17 00:00:00 2001 From: Timothy Jones Date: Sat, 18 Jul 2026 19:02:23 +1000 Subject: [PATCH] ci: Fix keep-node-current push (duplicate Authorization header) The dispatched run failed at git push with 'Duplicate header: Authorization' (remote 400). actions/checkout persists a credential extraheader by default; combined with the action's own push token, git sends two Authorization headers. Disable persist-credentials so only the action's token is used, matching scorecard.yml. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/keep-node-current.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/keep-node-current.yml b/.github/workflows/keep-node-current.yml index 99880e3fa..261ff149e 100644 --- a/.github/workflows/keep-node-current.yml +++ b/.github/workflows/keep-node-current.yml @@ -23,6 +23,11 @@ jobs: egress-policy: audit - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + # Don't leave checkout's Authorization extraheader in the git config; + # the action pushes with its own token, and both being present makes + # git send a duplicate Authorization header (remote 400 on push). + persist-credentials: false - name: Keep Node current uses: TimothyJones/github-action-keep-node-current@6702717590b2ea4b147dd9007e9dda0d05d2ffc4 # v1.0.2