From fb5594743b0f8c613128d38586cbb1399316781e Mon Sep 17 00:00:00 2001
From: "kiloconnect[bot]" <240665456+kiloconnect[bot]@users.noreply.github.com>
Date: Wed, 6 May 2026 08:38:59 +0000
Subject: [PATCH] fix(ci): clear checkout v6 credentials

---
 .github/actions/setup-git-committer/action.yml | 9 +++++++++
 .github/workflows/beta.yml                     | 1 +
 .github/workflows/generate.yml                 | 4 ++++
 .github/workflows/publish.yml                  | 4 ++++
 4 files changed, 18 insertions(+)

diff --git a/.github/actions/setup-git-committer/action.yml b/.github/actions/setup-git-committer/action.yml
index 0fff208f62..0474b670a6 100644
--- a/.github/actions/setup-git-committer/action.yml
+++ b/.github/actions/setup-git-committer/action.yml
@@ -39,6 +39,15 @@ runs:
     - name: Clear checkout auth
       run: |
         git config --local --unset-all http.https://github.com/.extraheader || true
+        # kilocode_change start
+        keys="$(git config --local --name-only --get-regexp '^includeIf\.gitdir:' || true)"
+        for key in $keys; do
+          path="$(git config --local --get "$key" || true)"
+          case "$path" in
+            *git-credentials-*.config) git config --local --unset-all "$key" || true ;;
+          esac
+        done
+        # kilocode_change end
       shell: bash
 
     - name: Configure git remote
diff --git a/.github/workflows/beta.yml b/.github/workflows/beta.yml
index 7411e242b9..90fd102189 100644
--- a/.github/workflows/beta.yml
+++ b/.github/workflows/beta.yml
@@ -16,6 +16,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v6 # kilocode_change
         with:
+          persist-credentials: false # kilocode_change
           fetch-depth: 0
 
       - name: Setup Bun
diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml
index e7c44e371d..2a3f221c17 100644
--- a/.github/workflows/generate.yml
+++ b/.github/workflows/generate.yml
@@ -15,6 +15,10 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6 # kilocode_change
+        # kilocode_change start
+        with:
+          persist-credentials: false
+        # kilocode_change end
 
       - name: Setup Bun
         uses: ./.github/actions/setup-bun
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 54c78d10bc..34f35c22ce 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -184,6 +184,10 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6 # kilocode_change
+        # kilocode_change start
+        with:
+          persist-credentials: false
+        # kilocode_change end
 
       - uses: ./.github/actions/setup-bun