From 47ce4818f026a2eb10a43c89dcfc1e58fa542ed6 Mon Sep 17 00:00:00 2001
From: peptiderepo <peptiderepo@users.noreply.github.com>
Date: Fri, 17 Apr 2026 17:12:50 +0700
Subject: [PATCH] fix: use REPO_ADMIN_PAT for cross-repo secret copying

CTO_ADMIN_TOKEN lacked permissions to set secrets on other repos.
REPO_ADMIN_PAT has repo+workflow scopes needed for the GitHub
secrets API.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .github/workflows/copy-secrets.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/copy-secrets.yml b/.github/workflows/copy-secrets.yml
index bc9edd4..2ca8b52 100755
--- a/.github/workflows/copy-secrets.yml
+++ b/.github/workflows/copy-secrets.yml
@@ -17,7 +17,7 @@ jobs:
 
       - name: Copy secrets to new repos
         env:
-          GH_PAT: ${{ secrets.CTO_ADMIN_TOKEN }}
+          GH_PAT: ${{ secrets.REPO_ADMIN_PAT }}
           SSH_HOST: ${{ secrets.SSH_HOST }}
           SSH_USERNAME: ${{ secrets.SSH_USERNAME }}
           SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}