From 1d333fe8558237c5e8f60d7091cd85765775afba Mon Sep 17 00:00:00 2001 From: Victor Kuznetsov Date: Sun, 26 Jul 2026 12:11:35 -0700 Subject: [PATCH] Use a dedicated ComfyUI release token --- .github/workflows/distribute.yml | 2 +- docs/release-and-distribution.md | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/distribute.yml b/.github/workflows/distribute.yml index 4cc8748..d907ae4 100644 --- a/.github/workflows/distribute.yml +++ b/.github/workflows/distribute.yml @@ -141,7 +141,7 @@ jobs: steps: - name: Sync and publish the ComfyUI nodes env: - GH_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }} + GH_TOKEN: ${{ secrets.COMFYUI_RELEASE_TOKEN }} run: | set -euo pipefail repo=wiltodelta/ComfyUI-remove-ai-watermarks diff --git a/docs/release-and-distribution.md b/docs/release-and-distribution.md index 3fc7d6e..1c98000 100644 --- a/docs/release-and-distribution.md +++ b/docs/release-and-distribution.md @@ -83,9 +83,9 @@ that repository's sync workflow with the exact library version and waits for it to finish. The sync updates the dependency floor, runs compatibility tests, bumps the node patch version, and publishes to the ComfyUI Registry only when those tests pass. Its daily schedule remains as a recovery path if a release -dispatch is interrupted. The `HOMEBREW_TAP_TOKEN` repository secret is also the -cross-repository release token; it needs Actions read and write access to the -ComfyUI node repository. +dispatch is interrupted. The `COMFYUI_RELEASE_TOKEN` repository secret is a +fine-grained token limited to the ComfyUI node repository, with Actions read and +write access. ## Release verification