From 7c462693a59e2c4c063f686f3c325164017ce851 Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Wed, 11 Feb 2026 15:26:50 +0000
Subject: [PATCH] fix(ci): authenticate git fetch upstream with GITHUB_TOKEN

Explicitly injects the GITHUB_TOKEN into the upstream remote URL in the agent-pr-review workflow. This prevents authentication failures when fetching the upstream repository in CI environments where plain HTTPS URLs trigger interactive credential prompts.

Co-authored-by: PR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com>
---
 .github/workflows/agent-pr-review.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/agent-pr-review.yml b/.github/workflows/agent-pr-review.yml
index b010a79b..497478b0 100644
--- a/.github/workflows/agent-pr-review.yml
+++ b/.github/workflows/agent-pr-review.yml
@@ -30,8 +30,10 @@ jobs:
           cache: 'npm'
 
       - name: Add upstream remote
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          git remote add upstream https://github.com/PR0M3TH3AN/bitvid.git || true
+          git remote add upstream https://x-access-token:${GITHUB_TOKEN}@github.com/PR0M3TH3AN/bitvid.git || true
           git fetch upstream
 
       - name: Verify upstream branch and diff