Maybe 2

.gitea/workflows/build.yml

@@ -15,11 +15,13 @@ jobs:
         - /home/clustermaster/storage/cdn/serve/internal/probe:/output
     steps:
       - name: Check out repository
+        env:
+          CHECKOUT_TOKEN: ${{ github.token }}
         run: |
+          [ -n "${CHECKOUT_TOKEN}" ] || { echo "job token is empty"; exit 1; }
           command -v git >/dev/null || (apt-get update && apt-get install -y --no-install-recommends git)
-          auth=$(printf '%s' "x-access-token:${GITHUB_TOKEN}" | base64 -w0)
+          auth=$(printf '%s' "gitea-actions:${CHECKOUT_TOKEN}" | base64 -w0)
           git init -q .
-          git config http.sslVerify false
           git -c http.extraHeader="Authorization: Basic ${auth}" \
             fetch --depth=1 "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" "${GITHUB_SHA}"
           git checkout -q FETCH_HEAD