diff --git a/pkg/runner/step_action_remote.go b/pkg/runner/step_action_remote.go index 26b178e..264b060 100644 --- a/pkg/runner/step_action_remote.go +++ b/pkg/runner/step_action_remote.go @@ -64,7 +64,13 @@ func (sar *stepActionRemote) prepareActionExecutor() common.Executor { URL: sar.remoteAction.CloneURL(), Ref: sar.remoteAction.Ref, Dir: actionDir, - Token: github.Token, + Token: "", /* + Shouldn't provide token when cloning actions, + the token comes from the instance which triggered the task, + however, it might be not the same instance which provides actions. + For GitHub, they are the same, always github.com. + But for Gitea, tasks triggered by a.com can clone actions from b.com. + */ }) var ntErr common.Executor if err := gitClone(ctx); err != nil {