From 6cf84cc93e5c62214f9988c399f7e66471192c7f Mon Sep 17 00:00:00 2001
From: "hf-security-analysis[bot]"
 <265538906+hf-security-analysis[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 12:17:20 +0000
Subject: [PATCH] fix(security): remediate workflow vulnerability in
 .github/workflows/sync_space.yml

---
 .github/workflows/sync_space.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/sync_space.yml b/.github/workflows/sync_space.yml
index aab082a6..b99796a6 100644
--- a/.github/workflows/sync_space.yml
+++ b/.github/workflows/sync_space.yml
@@ -32,5 +32,7 @@ jobs:
           git add -A
           git commit -m "Sync from leLab @ ${GITHUB_SHA}"
           git remote add hf https://huggingface.co/spaces/lerobot/LeLab
-          git config credential.helper '!f() { echo "username=Nico-robot"; echo "password=$HF_TOKEN"; }; f'
+          echo "https://Nico-robot:${HF_TOKEN}@huggingface.co" > ~/.git-credentials
+          git config credential.helper store
           git push -f hf main
+          rm -f ~/.git-credentials