From cf4ca7ab1343fe968328c176db7a57431a52e144 Mon Sep 17 00:00:00 2001
From: leecoder <leecoder@aol.com>
Date: Tue, 1 Sep 2026 11:17:31 +0900
Subject: [PATCH] fix(workflow): authenticate git push with GITHUB_TOKEN
 (persist-credentials: false)

actions/checkout runs with persist-credentials: false, so the previous
'git push origin' would fail with auth error. Push over HTTPS with an
x-access-token URL using GITHUB_TOKEN. Addresses Greptile review:
'authenticated Git push configuration'.
---
 .github/workflows/monitor_databricks_pricing.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/monitor_databricks_pricing.yml b/.github/workflows/monitor_databricks_pricing.yml
index de35b58e676..501acc503be 100644
--- a/.github/workflows/monitor_databricks_pricing.yml
+++ b/.github/workflows/monitor_databricks_pricing.yml
@@ -38,6 +38,7 @@ jobs:
         if: steps.monitor.outputs.changed == 'true'
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN_FOR_PUSH: ${{ secrets.GITHUB_TOKEN }}
         run: |
           BRANCH="monitor-dbx-pricing-$(date +'%Y-%m-%d')"
           git config user.name "github-actions[bot]"
@@ -49,7 +50,7 @@ jobs:
 Automated daily monitor detected changed DBU rates on
 https://www.databricks.com/product/pricing/foundation-model-serving
 Updated entries: databricks/databricks-deepseek-v4-*"
-          git push origin "$BRANCH"
+          git push "https://x-access-token:${GITHUB_TOKEN_FOR_PUSH}@github.com/${GITHUB_REPOSITORY}.git" "$BRANCH"
           gh pr create --repo "${{ github.repository }}" \
             --base litellm_internal_staging \
             --head "$BRANCH" \