From cf83bbcfb2b734d1be01d446e87519d7ea146c55 Mon Sep 17 00:00:00 2001
From: Gil Mishal <gil@flox.dev>
Date: Wed, 29 Jul 2026 17:10:48 -0400
Subject: [PATCH 1/3] ci: use FloxHub service-account token

---
 .github/workflows/ci.yml | 16 ++--------------
 1 file changed, 2 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7c0ac42..0c13fa8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -94,19 +94,7 @@ jobs:
         uses: flox/install-flox-action@c94e7e1ab56ae14fe98bae4fd84384fd135f0c2a # main
 
 
-      - name: "Get FloxHub token"
-        run: |
-          export FLOX_FLOXHUB_TOKEN=$(
-            curl --request POST \
-              --url https://auth.flox.dev/oauth/token \
-              --header 'content-type: application/x-www-form-urlencoded' \
-              --data "client_id=${{ secrets.MANAGED_FLOXENVS_AUTH0_CLIENT_ID }}" \
-              --data "audience=https://hub.flox.dev/api" \
-              --data "grant_type=client_credentials" \
-              --data "client_secret=${{ secrets.MANAGED_FLOXENVS_AUTH0_CLIENT_SECRET }}" \
-                | jq .access_token -r)
-          flox auth status
-          echo "FLOX_FLOXHUB_TOKEN=$FLOX_FLOXHUB_TOKEN" >> $GITHUB_ENV
-
       - name: "Build & Publish"
+        env:
+          FLOX_FLOXHUB_TOKEN: "${{ secrets.FLOX_FLOXHUB_TOKEN }}"
         run: "flox publish --org flox spdx-to-mermaid"

From 2d6238c23980d912a9b1e9a59d0fd0f3648fb339 Mon Sep 17 00:00:00 2001
From: Gil Mishal <gil@flox.dev>
Date: Thu, 30 Jul 2026 12:06:53 -0400
Subject: [PATCH 2/3] chore(ci): source FloxHub token from DeltaOps

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0c13fa8..d5e10b4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -96,5 +96,5 @@ jobs:
 
       - name: "Build & Publish"
         env:
-          FLOX_FLOXHUB_TOKEN: "${{ secrets.FLOX_FLOXHUB_TOKEN }}"
+          FLOX_FLOXHUB_TOKEN: "${{ secrets.MANAGED_SPDX_VISUALIZER_FLOXHUB_TOKEN }}"
         run: "flox publish --org flox spdx-to-mermaid"

From 29147b8ce9cf6f2d445c9e863f0c85ab42539905 Mon Sep 17 00:00:00 2001
From: Gil Mishal <gil@flox.dev>
Date: Thu, 30 Jul 2026 13:40:35 -0400
Subject: [PATCH 3/3] fix(ci): use organization FloxHub token

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d5e10b4..44a3bd3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -96,5 +96,5 @@ jobs:
 
       - name: "Build & Publish"
         env:
-          FLOX_FLOXHUB_TOKEN: "${{ secrets.MANAGED_SPDX_VISUALIZER_FLOXHUB_TOKEN }}"
+          FLOX_FLOXHUB_TOKEN: "${{ secrets.MANAGED_FLOX_FLOXHUB_TOKEN }}"
         run: "flox publish --org flox spdx-to-mermaid"