From 708637f65a2cc831dfe7bc8d600860c44e19efe9 Mon Sep 17 00:00:00 2001
From: Akash Levy <akash@silimate.com>
Date: Sat, 28 Feb 2026 12:07:03 -0800
Subject: [PATCH] fix: use PAT for private submodule access (abc, verific)

Deploy keys are repo-scoped and can't access multiple private repos.
Use a PAT (SUBMODULE_PAT) that has access to all required repos.

Made-with: Cursor
---
 .github/workflows/release.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5cc7f0933..23b32ab0a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,11 +19,12 @@ jobs:
         with:
           fetch-depth: 0
           submodules: false
-          ssh-key: ${{ secrets.VERIFIC_DEPLOY_KEY }}
+          token: ${{ secrets.SUBMODULE_PAT }}
 
       - name: Initialize submodules
         run: |
-          git submodule update --init --recursive
+          git -c url."https://x-access-token:${{ secrets.SUBMODULE_PAT }}@github.com/".insteadOf="git@github.com:" \
+            submodule update --init --recursive
 
       - name: Build wheel in Alpine container
         run: |