From 15952b9b2441ec59700fb6c2d6bb15de3bd06bc5 Mon Sep 17 00:00:00 2001 From: jaxperro Date: Sat, 11 Jul 2026 02:05:50 -0400 Subject: [PATCH] clone-guard: query the public commits API unauthenticated MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The fine-grained-PAT Authorization header 401'd on the box (06:04 boot → 'API unreachable', fail-open). Public repo: no auth needed; 60/hr unauthenticated limit is plenty for boot-time checks. Co-Authored-By: Claude Fable 5 --- host/start.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/host/start.sh b/host/start.sh index 2a204123..40f50935 100755 --- a/host/start.sh +++ b/host/start.sh @@ -69,8 +69,9 @@ cd "$DIR" # API is unreachable — never blocks the boot forever). for try in 1 2 3 4; do LOCAL_SHA=$(git rev-parse HEAD) + # public repo — unauthenticated works and avoids fine-grained-PAT header + # quirks (the token'd call 401'd on the box, 2026-07-11 06:04 boot) REMOTE_SHA=$(curl -sf --max-time 10 \ - -H "Authorization: token ${GITHUB_TOKEN}" \ -H "Accept: application/vnd.github.sha" \ https://api.github.com/repos/jaxperro/winning-wallet-finder/commits/main \ || true)