ociauth: be more strict about when we turn a 401 into a 403 #220

	# Code generated internal/ci/ci_tool.cue; DO NOT EDIT.

	name: Push tip to trybot
	"on":
	push:
	branches:
	- main
	concurrency: push_tip_to_trybot
	jobs:
	push:
	runs-on: ubuntu-22.04
	defaults:
	run:
	shell: bash
	if: ${{github.repository == 'cue-labs/oci'}}
	steps:
	- name: Write netrc file for porcuepine Gerrithub
	run: \|-
	cat <<EOD > ~/.netrc
	machine review.gerrithub.io
	login porcuepine
	password ${{ secrets.PORCUEPINE_GERRITHUB_PASSWORD }}
	EOD
	chmod 600 ~/.netrc
	- name: Push tip to trybot
	run: \|-
	mkdir tmpgit
	cd tmpgit
	git init -b initialbranch
	git config user.name porcuepine
	git config user.email cue.porcuepine@gmail.com
	git config http.https://github.com/.extraheader "AUTHORIZATION: basic $(echo -n porcuepine:${{ secrets.PORCUEPINE_GITHUB_PAT }} \| base64)"
	git remote add origin https://review.gerrithub.io/a/cue-labs/oci
	git remote add trybot https://github.com/cue-labs/oci-trybot

	git fetch origin "${{ github.ref }}"

	success=false
	for try in {1..20}; do
	echo "Push to trybot try $try"
	if git push -f trybot "FETCH_HEAD:${{ github.ref }}"; then
	success=true
	break
	fi
	sleep 1
	done
	if ! $success; then
	echo "Giving up"
	exit 1
	fi

Provide feedback