Fix: Authenticate git push and script env var with PAT_TOKEN in update-readme workflow

[Copilot]

github-actions[bot] lacks write access to the org repo, causing the leaderboard update workflow to fail. Two issues were fixed:

1. Script env var mismatch: updateReadme.js reads process.env.PAT_TOKEN, but the workflow was passing the secret as GITHUB_TOKEN, causing the script to exit immediately with "PAT_TOKEN is not set" before the push step was ever reached.

2. Push authentication: git push origin HEAD:main was failing with a 403 because github-actions[bot] lacks write access.

Changes

• .github/workflows/update-readme.yml — Fixed the env variable name in the "Generate leaderboard" step from GITHUB_TOKEN to PAT_TOKEN, and replaced git push origin HEAD:main with an authenticated remote URL using PAT_TOKEN injected via git remote set-url:

- name: Generate leaderboard
  run: node profile/scripts/updateReadme.js
  env:
    PAT_TOKEN: ${{ secrets.PAT_TOKEN }}

- name: Commit & push changes
  env:
    PAT_TOKEN: ${{ secrets.PAT_TOKEN }}
  run: |
    git remote set-url origin https://x-access-token:${PAT_TOKEN}@github.com/${{ github.repository }}.git
    git add profile/README.md
    git commit -m "Update leaderboard" || echo "No changes"
    git push origin HEAD:main

Using an env var (instead of inlining ${{ secrets.PAT_TOKEN }} directly in the URL) ensures the token remains masked in Actions logs.

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

[naheel0]

@copilot way still filure

GIT_PAK | 3 weeks ago |   -- | -- | -- PAT_TOKEN

[Copilot]

@copilot way still filure

...

Found the root cause from the CI logs: the "Generate leaderboard" step was setting the env variable as GITHUB_TOKEN but updateReadme.js reads process.env.PAT_TOKEN — so the script exited immediately with "PAT_TOKEN is not set" before the git push was ever reached.

Fixed in f7e3acd by changing the env mapping from GITHUB_TOKEN: ${{ secrets.PAT_TOKEN }} to PAT_TOKEN: ${{ secrets.PAT_TOKEN }}.