fix(ci): replace actions/checkout with git clone + GIT_SSL_NO_VERIFY to bypass self-signed cert

2026-06-21 15:06:54 -04:00
parent c3570481c8
commit 1e2345323f
1 changed files with 28 additions and 3 deletions
@@ -30,7 +30,15 @@ jobs:
      image: node:22-alpine
    steps:
      - name: Checkout repository
-        uses: actions/checkout@v4
+        env:
+          GIT_SSL_NO_VERIFY: "1"
+        run: |
+          git clone --depth 1 \
+            "https://x-access-token:${GITEA_TOKEN}@${GITEA_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git" \
+            .
+          git fetch --depth 1 origin "${{ github.sha }}"
+          git checkout "${{ github.sha }}"
+        shell: sh

      - name: Cache npm dependencies
        uses: actions/cache@v4
@@ -56,7 +64,15 @@ jobs:
      image: node:22-alpine
    steps:
      - name: Checkout repository
-        uses: actions/checkout@v4
+        env:
+          GIT_SSL_NO_VERIFY: "1"
+        run: |
+          git clone --depth 1 \
+            "https://x-access-token:${GITEA_TOKEN}@${GITEA_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git" \
+            .
+          git fetch --depth 1 origin "${{ github.sha }}"
+          git checkout "${{ github.sha }}"
+        shell: sh

      - name: Cache npm dependencies
        uses: actions/cache@v4
@@ -96,7 +112,16 @@ jobs:
      url: ${{ vars.PRODUCTION_URL }}
    steps:
      - name: Checkout repository
-        uses: actions/checkout@v4
+        env:
+          GIT_SSL_NO_VERIFY: "1"
+        run: |
+          apk add --no-cache git
+          git clone --depth 1 \
+            "https://x-access-token:${GITEA_TOKEN}@${GITEA_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git" \
+            .
+          git fetch --depth 1 origin "${{ github.sha }}"
+          git checkout "${{ github.sha }}"
+        shell: sh

      - name: Install SSH and rsync
        run: |