From 02e6df0340dc2490dabb6fa04c2402051fe98bc4 Mon Sep 17 00:00:00 2001
From: reachableceo <charles@turnsys.com>
Date: Wed, 2 Sep 2026 22:46:31 -0500
Subject: [PATCH] fix(deploy): !secret must be the whole header value, not
 inline [#734]

gitea got no auth (401: only signed in user) - secrets do not
concatenate. Secret now holds the full 'Bearer <token>' header.
Detail: https://projects.knownelement.com/issues/734
---
 packages/deploy_pipeline.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/deploy_pipeline.yaml b/packages/deploy_pipeline.yaml
index e458038..4564370 100644
--- a/packages/deploy_pipeline.yaml
+++ b/packages/deploy_pipeline.yaml
@@ -8,7 +8,7 @@
 rest:
   - resource: https://git.knownelement.com/api/v1/repos/KNEL/pfv-bms/commits?limit=1
     headers:
-      Authorization: Bearer !secret gitea_deploy_watch_token
+      Authorization: !secret gitea_auth_header
       User-Agent: pfv-bms-deploy-watch
     scan_interval: 300
     verify_ssl: true