fix: use separate PAT for Homebrew tap updates

hmans · hmans · commit 670ecf3b0d65 · 2026-03-10T21:07:09.000+01:00
The built-in GITHUB_TOKEN can't push to the homebrew-beans repo.
Use a dedicated HOMEBREW_TAP_TOKEN for cross-repo access.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -36,5 +36,6 @@ jobs:
                   args: release --clean
               env:
                   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+                  HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
                   # Your GoReleaser Pro key, if you are using the 'goreleaser-pro' distribution
                   # GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }}
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
@@ -72,6 +72,7 @@ homebrew_casks:
   - repository:
       owner: hmans
       name: homebrew-beans
+      token: "{{ .Env.HOMEBREW_TAP_TOKEN }}"
     homepage: "https://github.com/hmans/beans"
     description: "Agentic-first issue tracker"
     license: "Apache-2.0"
