From a6cc9ab415617c930b28b33f81e3ac5f20d9f1cf Mon Sep 17 00:00:00 2001
From: Souma <git@5ouma.me>
Date: Tue, 9 Jun 2026 22:45:28 +0900
Subject: [PATCH] ci(release): Set persist-credential false

Set GitHub CLI as a Git credential helper to operate.
---
 .github/ghalint.yml           | 4 ----
 .github/workflows/release.yml | 6 +++++-
 2 files changed, 5 insertions(+), 5 deletions(-)
 delete mode 100644 .github/ghalint.yml

diff --git a/.github/ghalint.yml b/.github/ghalint.yml
deleted file mode 100644
index bccfaf5c..00000000
--- a/.github/ghalint.yml
+++ /dev/null
@@ -1,4 +0,0 @@
-excludes:
-  - policy_name: checkout_persist_credentials_should_be_false
-    workflow_file_path: .github/workflows/release.yml
-    job_name: release
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f86b67f0..a83645d4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -31,7 +31,10 @@ jobs:
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           token: ${{ steps.app-token.outputs.token }}
-          persist-credentials: true
+          persist-credentials: false
+
+      - name: 🔐 Set up Credential Helper
+        run: gh auth setup-git
 
       - name: 🔖 Release a new version
         id: tagpr
@@ -39,4 +42,5 @@ jobs:
         with:
           config: .github/tagpr.ini
         env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
           GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}