diff --git a/.github/workflows/checksums.yml b/.github/workflows/checksums.yml
index 5151a5f..8d84900 100644
--- a/.github/workflows/checksums.yml
+++ b/.github/workflows/checksums.yml
@@ -13,7 +13,8 @@ jobs:
       - name: Generate checksums
         run: |
           set -e
-          rm -rf /tmp/repo || true
+          git config --global credential.helper store
+          echo "https://ci:${{ secrets.CI_PASSWORD }}@git.haozi.net" > ~/.git-credentials
           git clone --depth 1 ${{ github.server_url }}/${{ github.repository }}.git /tmp/repo
           cd /tmp/repo
           git checkout ${{ github.ref_name }}
@@ -29,7 +30,5 @@ jobs:
           git add -A
           git config --global user.name "CI"
           git config --global user.email "ci@haozi.net"
-          git config --global user.password "${{ secrets.CI_PASSWORD }}"
           git commit -m "chore: update checksums" || true
           git push origin ${{ github.ref_name }}
-          rm -rf /tmp/repo