diff --git a/scripts/migrate-github-to-gitea.sh b/scripts/migrate-github-to-gitea.sh
index e54ee85..80e45f4 100644
--- a/scripts/migrate-github-to-gitea.sh
+++ b/scripts/migrate-github-to-gitea.sh
@@ -113,8 +113,11 @@ migrate_repo() {
   echo "=== $full_name (private=$private) ==="
   rm -rf "$mirror_dir"
 
-  git -c http.extraHeader="Authorization: Bearer $GITHUB_TOKEN" \
-    clone --mirror "https://github.com/${full_name}.git" "$mirror_dir"
+  # GitHub HTTPS + PAT: способ через Authorization header иногда ломается из‑за credential.helper /
+  # старых версий Git. Способ oauth2:<token>@github.com поддерживается GitHub для PAT и fine-grained.
+  # credential.helper= отключает подмешивание сохранённых логинов к github.com.
+  GIT_TERMINAL_PROMPT=0 git -c credential.helper= clone --mirror \
+    "https://oauth2:${GITHUB_TOKEN}@github.com/${full_name}.git" "$mirror_dir"
 
   create_gitea_repo_if_needed "$repo_name" "$private"
   push_mirror "$mirror_dir" "$repo_name"