Give this instance one credential for the private repositories it reads. The token is set in the environment, never in the committed file.
Open the configuration page. If it is not open, run revetly config and
open the address it prints.
Go to Instance settings > Git and records.
On the Git credentials row, select Add.
Enter acme in Name.
Enter https://github.com/<ACCOUNT>/ in Repository address. Replace
<ACCOUNT> with the forge account holding those repositories.
Enter the token in Token value.
In Token variable, leave REVETLY_GIT_TOKEN.
Select Save.
You should see Saved and in use.
On the Git credentials line, select Test credential.
You should see credential acme accepted.
In revetly.toml at the project root, declare the credential under
[git.credentials]:
# revetly.toml
[git.credentials.acme]
match = "https://github.com/<ACCOUNT>/"
Replace <ACCOUNT> with the forge account holding those repositories.
Read back what that credential covers:
revetly doctor --offline
[FAIL] git credentials acme: https://github.com/<ACCOUNT>/ (read only), REVETLY_GIT_TOKEN is NOT SET
In .env beside it, put the token that line asked for:
# .env
REVETLY_GIT_TOKEN=<FORGE_TOKEN>
Replace <FORGE_TOKEN> with the token from your forge.
Confirm the credential is complete:
revetly doctor --offline
[PASS] git credentials acme: https://github.com/<ACCOUNT>/ (read only), REVETLY_GIT_TOKEN is set
match
is a prefix of that remote. Shorten the prefix, or declare a second
credential.write = true on a credential matching that remote, with a
token that may push.