From 1bb409528db601f4e9d831c88d10e4f5e750a4ea Mon Sep 17 00:00:00 2001
From: Joe Julian <me@joejulian.name>
Date: Fri, 3 Apr 2026 20:37:27 -0700
Subject: [PATCH] Use system CA for CI artifact uploads

---
 .gitea/workflows/ci.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index dd04dc7..4f3c207 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -138,6 +138,9 @@ jobs:
 
       - name: Upload CI artifacts
         uses: christopherhx/gitea-upload-artifact@v4
+        env:
+          NODE_OPTIONS: --use-system-ca
+          SSL_CERT_FILE: /etc/ssl/certs/ca-certificates.crt
         with:
           name: keepassgo-${{ gitea.sha }}
           path: |
@@ -154,6 +157,8 @@ jobs:
           GITEA_SERVER_URL: ${{ gitea.server_url }}
           GITEA_REPOSITORY: ${{ gitea.repository }}
           GITEA_REF_NAME: ${{ gitea.ref_name }}
+          SSL_CERT_FILE: /etc/ssl/certs/ca-certificates.crt
+          REQUESTS_CA_BUNDLE: /etc/ssl/certs/ca-certificates.crt
         shell: bash
         run: |
           set -euo pipefail