From 078b9190f3df7feffc76ac06a73771d8dcb02d90 Mon Sep 17 00:00:00 2001
From: Carlos Galindo <arch@cgj.es>
Date: Wed, 10 Jun 2026 22:35:14 +0200
Subject: [PATCH] remove verbosity and changed input to secret

---
 publish-pkg/action.yml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/publish-pkg/action.yml b/publish-pkg/action.yml
index 36d6486..cc23536 100644
--- a/publish-pkg/action.yml
+++ b/publish-pkg/action.yml
@@ -7,9 +7,6 @@ inputs:
   repo_name:
     description: 'Name of the repository'
     default: 'pkgs'
-  PKG_TOKEN:
-    description: 'Token with package:write permissions'
-    required: true
 
 runs:
   using: 'composite'
@@ -18,8 +15,6 @@ runs:
     - id: publish_package
       name: Publish the package(s)
       run: |
-        set -x
-        echo "::add-mask::${{ inputs.PKG_TOKEN }}"
         ls packages | while read; do
           echo "##[group]Uploading package $REPLY"
           curl -X PUT $FORGEJO_SERVER_URL/api/packages/$FORGEJO_REPOSITORY_OWNER/arch/${{ inputs.repo_name }} \
@@ -32,7 +27,7 @@ runs:
           REPO_NAME=$(echo $FORGEJO_REPOSITORY | rev | cut -d/ -f1 | rev)
           echo "##[group]Linking $PKGNAME to $REPO_NAME"
           curl -X POST $FORGEJO_API_URL/packages/$FORGEJO_REPOSITORY_OWNER/arch/$PKGNAME/-/link/$REPO_NAME \
-            -H "Authorization: token ${{ inputs.PKG_TOKEN }}" \
+            -H "Authorization: token ${{ secrets.PKG_TOKEN }}" \
             --no-progress-meter
           echo "##[endgroup]"
         done