From 28f145f39299e09ff1dfc30340ff1ff000657f95 Mon Sep 17 00:00:00 2001
From: Daniel Arantes Loverde <daniel@loverde.com.br>
Date: Fri, 31 Jul 2026 10:41:36 -0300
Subject: [PATCH] [macos-runner] Disable credential helper and askpass for
 checkout clone

17-minute hang on git clone, far past the http.lowSpeedLimit abort
threshold, isn't explained by a data-transfer stall. Now that the VM has
a real GUI session (auto-login), git-credential-osxkeychain could be
popping a GUI dialog nobody's there to dismiss, bypassing
GIT_TERMINAL_PROMPT. Disable the credential helper and force askpass to
fail immediately instead of prompting.
---
 .gitea/workflows/beta.yml    | 4 +++-
 .gitea/workflows/release.yml | 4 +++-
 .gitea/workflows/test.yml    | 4 +++-
 3 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/.gitea/workflows/beta.yml b/.gitea/workflows/beta.yml
index 2cc5240..82a4deb 100644
--- a/.gitea/workflows/beta.yml
+++ b/.gitea/workflows/beta.yml
@@ -25,9 +25,11 @@ jobs:
       - name: Checkout
         run: |
           export GIT_TERMINAL_PROMPT=0
+          export GIT_ASKPASS=/bin/false
+          export SSH_ASKPASS=/bin/false
           REPO_URL="${{ gitea.server_url }}/${{ gitea.repository }}.git"
           AUTH_URL="$(echo "$REPO_URL" | sed "s#https://#https://x-access-token:${{ gitea.token }}@#")"
-          git -c http.lowSpeedLimit=1000 -c http.lowSpeedTime=30 clone "$AUTH_URL" .
+          git -c credential.helper= -c http.lowSpeedLimit=1000 -c http.lowSpeedTime=30 clone "$AUTH_URL" .
           git checkout "${{ gitea.sha }}"
 
       - name: Set build number
diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index e5ac71a..4517deb 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -25,9 +25,11 @@ jobs:
       - name: Checkout
         run: |
           export GIT_TERMINAL_PROMPT=0
+          export GIT_ASKPASS=/bin/false
+          export SSH_ASKPASS=/bin/false
           REPO_URL="${{ gitea.server_url }}/${{ gitea.repository }}.git"
           AUTH_URL="$(echo "$REPO_URL" | sed "s#https://#https://x-access-token:${{ gitea.token }}@#")"
-          git -c http.lowSpeedLimit=1000 -c http.lowSpeedTime=30 clone "$AUTH_URL" .
+          git -c credential.helper= -c http.lowSpeedLimit=1000 -c http.lowSpeedTime=30 clone "$AUTH_URL" .
           git checkout "${{ gitea.sha }}"
 
       - name: Verify ASC secrets
diff --git a/.gitea/workflows/test.yml b/.gitea/workflows/test.yml
index 8bda2ae..9e1f4e1 100644
--- a/.gitea/workflows/test.yml
+++ b/.gitea/workflows/test.yml
@@ -20,9 +20,11 @@ jobs:
       - name: Checkout
         run: |
           export GIT_TERMINAL_PROMPT=0
+          export GIT_ASKPASS=/bin/false
+          export SSH_ASKPASS=/bin/false
           REPO_URL="${{ gitea.server_url }}/${{ gitea.repository }}.git"
           AUTH_URL="$(echo "$REPO_URL" | sed "s#https://#https://x-access-token:${{ gitea.token }}@#")"
-          git -c http.lowSpeedLimit=1000 -c http.lowSpeedTime=30 clone "$AUTH_URL" .
+          git -c credential.helper= -c http.lowSpeedLimit=1000 -c http.lowSpeedTime=30 clone "$AUTH_URL" .
           git checkout "${{ gitea.sha }}"
 
       - name: Run unit tests