Use a registry bot account for the container registry
CI / build-image (arm64, ubuntu-latest-arm64) (push) Failing after 21s
CI / pre-commit (push) Has been cancelled
CI / test (-DCMAKE_BUILD_TYPE=Debug, debug) (push) Has been cancelled
CI / test (-DCMAKE_CXX_FLAGS=-DUSE_64_BIT=1, 64-bit-versions) (push) Has been cancelled
CI / test (-DCMAKE_C_COMPILER=gcc -DCMAKE_CXX_COMPILER=g++, gcc) (push) Has been cancelled
CI / test (-DUSE_SIMD_FALLBACK=ON, simd-fallback) (push) Has been cancelled
CI / release (amd64, ubuntu-latest-amd64) (push) Has been cancelled
CI / release (arm64, ubuntu-latest-arm64) (push) Has been cancelled
CI / coverage (push) Has been cancelled
CI / build-image (amd64, ubuntu-latest-amd64) (push) Has been cancelled

Gitea's ephemeral Actions token is not accepted by the container
registry, so docker login and image pulls use REGISTRY_USER /
REGISTRY_TOKEN secrets (a dedicated low-privilege account and its
personal access token with package read/write scope) instead.
This commit is contained in:
2026-06-12 11:15:51 -04:00
parent d74a12b5a4
commit 6eecf6e4ac
+11 -9
View File
@@ -17,7 +17,9 @@ jobs:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
- name: Log in to registry - name: Log in to registry
run: docker login -u ${{ gitea.actor }} -p ${{ secrets.GITHUB_TOKEN }} git.weaselab.dev run: |
echo "${{ secrets.REGISTRY_TOKEN }}" \
| docker login -u "${{ secrets.REGISTRY_USER }}" --password-stdin git.weaselab.dev
- name: Build and push image if changed - name: Build and push image if changed
run: | run: |
@@ -44,8 +46,8 @@ jobs:
container: container:
image: git.weaselab.dev/weaselab/conflict-set-ci:latest-amd64 image: git.weaselab.dev/weaselab/conflict-set-ci:latest-amd64
credentials: credentials:
username: ${{ gitea.actor }} username: ${{ secrets.REGISTRY_USER }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.REGISTRY_TOKEN }}
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
@@ -75,8 +77,8 @@ jobs:
container: container:
image: git.weaselab.dev/weaselab/conflict-set-ci:latest-amd64 image: git.weaselab.dev/weaselab/conflict-set-ci:latest-amd64
credentials: credentials:
username: ${{ gitea.actor }} username: ${{ secrets.REGISTRY_USER }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.REGISTRY_TOKEN }}
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
@@ -127,8 +129,8 @@ jobs:
container: container:
image: git.weaselab.dev/weaselab/conflict-set-ci:latest-${{ matrix.arch }} image: git.weaselab.dev/weaselab/conflict-set-ci:latest-${{ matrix.arch }}
credentials: credentials:
username: ${{ gitea.actor }} username: ${{ secrets.REGISTRY_USER }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.REGISTRY_TOKEN }}
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
@@ -188,8 +190,8 @@ jobs:
container: container:
image: git.weaselab.dev/weaselab/conflict-set-ci:latest-amd64 image: git.weaselab.dev/weaselab/conflict-set-ci:latest-amd64
credentials: credentials:
username: ${{ gitea.actor }} username: ${{ secrets.REGISTRY_USER }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.REGISTRY_TOKEN }}
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4