From 5f2daed4e15179afa4cbdc3ca3ecbeba9f77a9e6 Mon Sep 17 00:00:00 2001
From: user <ulgerang@gmail.com>
Date: Tue, 28 Apr 2026 17:33:11 +0900
Subject: [PATCH] fix: use query param for deploy secret (Gitea webhook
 compatible)

---
 internal/httpapi/deploy.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/httpapi/deploy.go b/internal/httpapi/deploy.go
index a2d4f4b..047c27c 100644
--- a/internal/httpapi/deploy.go
+++ b/internal/httpapi/deploy.go
@@ -12,7 +12,7 @@ func (h Handler) handleDeploy(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	if r.Header.Get("X-Deploy-Secret") != h.cfg.DeploySecret {
+	if r.URL.Query().Get("secret") != h.cfg.DeploySecret {
 		writeError(w, http.StatusUnauthorized, "invalid deploy secret")
 		return
 	}