From 471a76694851aa585c2fb3059f7e1bd5ec13e1ab Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Mon, 8 Jun 2026 11:06:23 +0000
Subject: [PATCH] fix(ci): authenticate git push in daily branch creation
 workflows

The 'Create Daily Staging Branch' and 'Create Daily oss-agent-shin Branch'
workflows have been failing on every scheduled run since persist-credentials
was set to false (PR #24663) for zizmor compliance. The follow-up 'git push
origin' falls back to prompting for a username because no credentials are
configured locally, leading to:

    fatal: could not read Username for 'https://github.com':
    No such device or address

Push using an explicit token URL instead so we keep persist-credentials off
while still being able to push the freshly created branch.

Co-authored-by: Krrish Dholakia <krrish-berri-2@users.noreply.github.com>
---
 .../create_daily_oss_agent_shin_branch.yml       |  8 +-------
 .../workflows/create_daily_staging_branch.yml    | 16 ++--------------
 2 files changed, 3 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/create_daily_oss_agent_shin_branch.yml b/.github/workflows/create_daily_oss_agent_shin_branch.yml
index d6118f3b53c..3b217b44f3f 100644
--- a/.github/workflows/create_daily_oss_agent_shin_branch.yml
+++ b/.github/workflows/create_daily_oss_agent_shin_branch.yml
@@ -23,25 +23,19 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          # Configure Git user
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
 
-          # Generate branch name with MM_DD_YYYY format
           BRANCH_NAME="litellm_oss_agent_shin_$(date +'%m_%d_%Y')"
           echo "Creating branch: $BRANCH_NAME"
 
-          # Fetch all branches
           git fetch --all
 
-          # Check if the branch already exists
           if git show-ref --verify --quiet refs/remotes/origin/$BRANCH_NAME; then
             echo "Branch $BRANCH_NAME already exists. Skipping creation."
           else
             echo "Creating new branch: $BRANCH_NAME"
-            # Create the new branch from main
             git checkout -b $BRANCH_NAME origin/main
-            # Push the new branch
-            git push origin $BRANCH_NAME
+            git push "https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git" "HEAD:refs/heads/$BRANCH_NAME"
             echo "Successfully created and pushed branch: $BRANCH_NAME"
           fi
diff --git a/.github/workflows/create_daily_staging_branch.yml b/.github/workflows/create_daily_staging_branch.yml
index 424d8de0a41..149eac9f70f 100644
--- a/.github/workflows/create_daily_staging_branch.yml
+++ b/.github/workflows/create_daily_staging_branch.yml
@@ -23,26 +23,20 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          # Configure Git user
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
 
-          # Generate branch name with MM_DD_YYYY format
           BRANCH_NAME="litellm_oss_staging_$(date +'%m_%d_%Y')"
           echo "Creating branch: $BRANCH_NAME"
 
-          # Fetch all branches
           git fetch --all
 
-          # Check if the branch already exists
           if git show-ref --verify --quiet refs/remotes/origin/$BRANCH_NAME; then
             echo "Branch $BRANCH_NAME already exists. Skipping creation."
           else
             echo "Creating new branch: $BRANCH_NAME"
-            # Create the new branch from main
             git checkout -b $BRANCH_NAME origin/main
-            # Push the new branch
-            git push origin $BRANCH_NAME
+            git push "https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git" "HEAD:refs/heads/$BRANCH_NAME"
             echo "Successfully created and pushed branch: $BRANCH_NAME"
           fi
 
@@ -63,25 +57,19 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          # Configure Git user
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
 
-          # Generate branch name with MM_DD_YYYY format
           BRANCH_NAME="litellm_internal_dev_$(date +'%m_%d_%Y')"
           echo "Creating branch: $BRANCH_NAME"
 
-          # Fetch all branches
           git fetch --all
 
-          # Check if the branch already exists
           if git show-ref --verify --quiet refs/remotes/origin/$BRANCH_NAME; then
             echo "Branch $BRANCH_NAME already exists. Skipping creation."
           else
             echo "Creating new branch: $BRANCH_NAME"
-            # Create the new branch from main
             git checkout -b $BRANCH_NAME origin/main
-            # Push the new branch
-            git push origin $BRANCH_NAME
+            git push "https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git" "HEAD:refs/heads/$BRANCH_NAME"
             echo "Successfully created and pushed branch: $BRANCH_NAME"
           fi