From a722c92e299b0dad3e336f914ece076223c768a3 Mon Sep 17 00:00:00 2001
From: Yauhen Bichel <yauhen.bichel@gmail.com>
Date: Fri, 11 Sep 2026 12:09:05 +0100
Subject: [PATCH] Fill the profile's contributors wall, straight to main

Every run of the copied wall job has failed since 7 September and the
profile's wall is empty. Its git add named .github/contributors.svg, which
html format never writes, so the step died with exit 128; and it pushed to a
protected main with the workflow token, which the ruleset refuses.

It now calls readme-contributors' reusable wall at v1.9.0, pinned by commit,
with readme set to profile/README.md, and pushes straight to main through the
write deploy key stored as CONTRIBUTORS_DEPLOY_KEY. No separate pull request.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .github/workflows/contributors.yml | 47 ++++++++++++++----------------
 1 file changed, 22 insertions(+), 25 deletions(-)

diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
index 93582ad..cf9b6e8 100644
--- a/.github/workflows/contributors.yml
+++ b/.github/workflows/contributors.yml
@@ -1,36 +1,33 @@
 name: Contributors
 
+# The wall lives in readme-contributors as a reusable workflow and is written
+# straight to main after every merge, with no separate pull request. The
+# organisation profile keeps its README at profile/README.md, so that is the
+# file the wall fills.
+#
+# This used to be a copy of the job, and every run since 7 September failed:
+# its git add named .github/contributors.svg, which html format never writes,
+# so the step died with exit 128 before it could commit; and it pushed to a
+# protected main with the workflow token, which the ruleset refuses. The
+# profile's wall stayed empty.
+#
+# main is protected, so the wall pushes through the write deploy key stored as
+# CONTRIBUTORS_DEPLOY_KEY. `secrets: inherit` hands it over.
+
 on:
+  push:
+    branches: [main]
   schedule:
     - cron: "17 4 * * 0"
   workflow_dispatch:
-  push:
-    branches:
-      - main
 
 permissions:
   contents: write
 
 jobs:
-  readme:
-    if: github.actor != 'github-actions[bot]'
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          persist-credentials: true
-
-      - uses: YauhenBichel/readme-contributors@25e0b067b5edec34206283138657dc8a8713d89a # reuse captions
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          format: html
-          readme: profile/README.md
-
-      - name: Push the list
-        run: |
-          git config user.name github-actions[bot]
-          git config user.email 41898282+github-actions[bot]@users.noreply.github.com
-          git add profile/README.md .github/contributors.svg .github/faces
-          git diff --cached --quiet && exit 0
-          git commit -m "docs: refresh README contributors"
-          git push
+  wall:
+    uses: YauhenBichel/readme-contributors/.github/workflows/wall.yml@a7a404eee356cff3be78b6aaf419916909994b60 # v1.9.0
+    with:
+      readme: profile/README.md
+      format: html
+    secrets: inherit