Git Credentials

Purpose

Diagnose git clone, fetch, and push authentication failures in Termux without ever exposing a token or private key.

When to use

Authentication failed, HTTP 403, Permission denied (publickey), Host key verification failed, repeated credential prompts, UNPROTECTED PRIVATE KEY FILE, or Permission to X denied to Y.

When NOT to use

Network outages (termux-network), wrong remote names, or non-authentication push rejections such as non-fast-forward or protected-branch rules that name no credential problem.

Preconditions

Run sh scripts/check-git-auth.sh. It redacts credentials embedded in remote URLs, lists key file names and modes only, and never reads key contents. If a remote URL embeds a token (https://user:secret@host/...), do not repeat it; that is itself a finding to fix.