fix: symfony bundle publish task

Author: vardumper

.github/workflows/dtrack-trivy.yml

@@ -1,6 +1,6 @@
 name: Workflow for Depency Track and Trivy
 env:
-  BRANCH_NAME: ${{ github.head_ref || github.ref_name }}
+  BRANCH_NAME: ${{ github.head_ref || (github.ref_type == 'branch' && github.ref_name) || github.event.repository.default_branch }}
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
 on:
   push:
@@ -52,7 +52,7 @@ jobs:
             git config --global user.email 'github-actions[bot]@users.noreply.github.com'
             git add sbom.json
             git commit -am "sbom.json updated" --no-verify || exit 1
-            git push origin HEAD:${BRANCH_NAME} -f
+            git push origin HEAD:refs/heads/${BRANCH_NAME} -f
         continue-on-error: false
 
       - name: Push SBOM to Dependency Track

.github/workflows/release-symfony-bundle.yml

@@ -36,7 +36,11 @@ jobs:
           git config --global url."https://${GH_TOKEN}:x-oauth-basic@github.com/".insteadOf "https://github.com/"
 
           git clone https://github.com/vardumper/html5-twig-component-bundle.git target
-          rsync -a --delete --exclude='.git/' templates/twig-component/ target/
+          # Sync dotfiles as well, but skip workflow files unless PAT has workflow scope.
+          rsync -a --delete \
+            --exclude='.git/' \
+            --exclude='.github/workflows/' \
+            templates/twig-component/ target/
           cd target
 
           # Update version in composer.json

templates/twig-component/.github/workflows/dtrack-trivy.yml

@@ -1,6 +1,6 @@
 name: Workflow for Depency Track and Trivy
 env:
-  BRANCH_NAME: ${{ github.head_ref || github.ref_name }}
+  BRANCH_NAME: ${{ github.head_ref || (github.ref_type == 'branch' && github.ref_name) || github.event.repository.default_branch }}
 on:
   push:
     paths:
@@ -58,7 +58,7 @@ jobs:
               exit 0
             fi
             git commit -m "chore: update sbom.json" --no-verify
-            git push origin HEAD:${BRANCH_NAME}
+            git push origin HEAD:refs/heads/${BRANCH_NAME}
         continue-on-error: false
 
       - name: Push SBOM to Dependency Track