From e48580adb99619789bdf7a2c0b59fd537c8670e5 Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Tue, 18 Aug 2026 15:08:01 -0700
Subject: [PATCH] fix(ci): Forgejo Actions auth + kustomize cleanup in
 validate-k8s workflow

---
 .forgejo/workflows/argocd-sync.yaml   |  8 +++++++-
 .forgejo/workflows/security-scan.yaml |  8 +++++++-
 .forgejo/workflows/validate-k8s.yaml  | 15 +++++++++++----
 3 files changed, 25 insertions(+), 6 deletions(-)

diff --git a/.forgejo/workflows/argocd-sync.yaml b/.forgejo/workflows/argocd-sync.yaml
index b2ee87c..02896c9 100644
--- a/.forgejo/workflows/argocd-sync.yaml
+++ b/.forgejo/workflows/argocd-sync.yaml
@@ -12,7 +12,13 @@ jobs:
     runs-on: docker
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        run: |
+          REPO_URL="${{ gitea.server_url }}/${{ gitea.repository }}.git"
+          CLONE_URL="https://${{ secrets.CI_RUNNER }}:${{ secrets.CI_RUNNER_SECRET }}@${REPO_URL#https://}"
+          git clone --depth 1 "$CLONE_URL" .
+          cd ${GITHUB_WORKSPACE}
+          git fetch origin main
+          git checkout main
 
       - name: Install ArgoCD CLI
         run: |
diff --git a/.forgejo/workflows/security-scan.yaml b/.forgejo/workflows/security-scan.yaml
index 7e5ad60..047834f 100644
--- a/.forgejo/workflows/security-scan.yaml
+++ b/.forgejo/workflows/security-scan.yaml
@@ -16,7 +16,13 @@ jobs:
     runs-on: docker
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        run: |
+          REPO_URL="${{ gitea.server_url }}/${{ gitea.repository }}.git"
+          CLONE_URL="https://${{ secrets.CI_RUNNER }}:${{ secrets.CI_RUNNER_SECRET }}@${REPO_URL#https://}"
+          git clone --depth 1 "$CLONE_URL" .
+          cd ${GITHUB_WORKSPACE}
+          git fetch origin main
+          git checkout main
 
       - name: Install Tools
         run: |
diff --git a/.forgejo/workflows/validate-k8s.yaml b/.forgejo/workflows/validate-k8s.yaml
index 25f53b4..1e449ee 100644
--- a/.forgejo/workflows/validate-k8s.yaml
+++ b/.forgejo/workflows/validate-k8s.yaml
@@ -18,7 +18,13 @@ jobs:
     runs-on: docker
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        run: |
+          REPO_URL="${{ gitea.server_url }}/${{ gitea.repository }}.git"
+          CLONE_URL="https://${{ secrets.CI_RUNNER }}:${{ secrets.CI_RUNNER_SECRET }}@${REPO_URL#https://}"
+          git clone --depth 1 "$CLONE_URL" .
+          cd ${GITHUB_WORKSPACE}
+          git fetch origin main
+          git checkout main
 
       - name: Install Tools
         run: |
@@ -30,11 +36,12 @@ jobs:
 
           # Install kubeval
           curl -L https://github.com/instrumenta/kubeval/releases/latest/download/kubeval-linux-amd64.tar.gz | tar xz
-          mv kubeval /usr/local/bin/
+          mv -f kubeval /usr/local/bin/
 
-          # Install kustomize
+          # Install kustomize (remove old if exists)
+          rm -f kustomize
           curl -s https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh | bash
-          mv kustomize /usr/local/bin/
+          mv -f kustomize /usr/local/bin/
 
           # Install ArgoCD CLI
           curl -sSL -o /usr/local/bin/argocd https://github.com/argoproj/argo-cd/releases/latest/download/argocd-linux-amd64