From c411f11e8b5d49ec7dc603067e760990c46029e8 Mon Sep 17 00:00:00 2001
From: forbes <zoe.forbes@kindred-systems.com>
Date: Tue, 27 Jan 2026 14:28:05 -0600
Subject: [PATCH] Use SSH deploy key for submodule checkout in CI

- Add ssh-key parameter to checkout action in build.yml and release.yml
- Uses DEPLOY_KEY secret for SSH authentication to internal repos
- Fixes 403 permission errors when cloning mods/silo submodule
---
 .gitea/workflows/build.yml   | 1 +
 .gitea/workflows/release.yml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 09b1cce860..6955b4e11f 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -33,6 +33,7 @@ jobs:
         with:
           submodules: recursive
           fetch-depth: 0
+          ssh-key: ${{ secrets.DEPLOY_KEY }}
 
       - name: Install pixi if needed
         shell: bash
diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index 2481e05a50..84c433cc36 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -42,6 +42,7 @@ jobs:
           submodules: recursive
           fetch-depth: 0
           fetch-tags: true
+          ssh-key: ${{ secrets.DEPLOY_KEY }}
 
       - name: Install pixi if needed
         shell: bash