From bef793aab78177baf1ba05689035422f91a4cc5d Mon Sep 17 00:00:00 2001
From: Timothy Kim <timothykim@fastmail.fm>
Date: Sun, 15 Mar 2026 23:00:46 -0400
Subject: [PATCH] fix: use bw get notes for registry token (secure note, not
 login)

---
 setup.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/setup.sh b/setup.sh
index ecd3e86..0ac868c 100755
--- a/setup.sh
+++ b/setup.sh
@@ -61,7 +61,7 @@ git-crypt unlock /tmp/git-crypt-key
 rm /tmp/git-crypt-key
 
 echo "==> Fetching secrets from Bitwarden..."
-REGISTRY_TOKEN=$("$BW_CLI" get password hantim-ci-registry-push --session "$BW_SESSION")
+REGISTRY_TOKEN=$("$BW_CLI" get notes hantim-ci-registry-push --session "$BW_SESSION")
 DEPLOY_PUBKEY=$("$BW_CLI" get item hantim-server-deploy --session "$BW_SESSION" | jq -r '.sshKey.publicKey')
 "$BW_CLI" lock