Fix git submodule authentication

action.yml

@@ -1,5 +1,10 @@
 name: 'Initialize CI Environment and Repository'
 description: 'Initialize a CI environment with nix (and also checkout the repository recursively with LFS)'
+inputs:
+  token:
+    description: 'OAUTH token to access repositories'
+    required: false
+    default: ${{ github.token }}
 runs:
   using: "composite"
   steps:
@@ -14,7 +19,8 @@ runs:
       shell: "nix shell nixpkgs#git-lfs nixpkgs#gnused --command {0}"
       run: |
         git lfs install
-        git config --global credential.helper store
-        AUTH_URL=`echo -n "$GITHUB_SERVER_URL" | sed "s%https://%https://oauth2:$GITHUB_TOKEN@%"`
+        GIT_SERVER=`echo -n "$GITHUB_SERVER_URL" | sed "s%https://%%"`
+        echo -e "machine $GIT_SERVER\nlogin oauth2\npassword ${{ inputs.token }}" > ~/.netrc
         # Disable clone protection to pull LFS as well
-        GIT_CLONE_PROTECTION_ACTIVE=false git clone --branch $GITHUB_REF_NAME --recurse-submodules $AUTH_URL/$GITHUB_REPOSITORY .
+        GIT_CLONE_PROTECTION_ACTIVE=false git clone --branch $GITHUB_REF_NAME --recurse-submodules $GITHUB_SERVER_URL/$GITHUB_REPOSITORY .
+        git submodule update --init