From b6f3300bbf8607c7f40e047dd80259b09409bce0 Mon Sep 17 00:00:00 2001
From: Etgpao <104690059+paopaoandlingyia@users.noreply.github.com>
Date: Tue, 27 Jan 2026 10:08:47 +0800
Subject: [PATCH] sync: fallback to PAT_TOKEN secret when override-token is
 empty
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Explain briefly:
UI input field doesn’t evaluate ${{ secrets.* }}, users may paste it and it becomes a literal string.
Add fallback to secrets.PAT_TOKEN to make workflow_dispatch easier and safer.
---
 .github/workflows/sync.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/sync.yaml b/.github/workflows/sync.yaml
index 0c1bf51..14692be 100644
--- a/.github/workflows/sync.yaml
+++ b/.github/workflows/sync.yaml
@@ -13,7 +13,7 @@ on:
         required: true
         default: false
       override-token:
-        description: '[Optional] Replace the default token with the supplied PAT. Used to resolve `refusing to allow a GitHub App to create or update workflow... `'
+        description: '[Optional] Paste a PAT here. If left blank, PAT_TOKEN secret will be used (if set), otherwise GITHUB_TOKEN.'
         required: false
 
 jobs: