weaselbot/conflict-set
1
Fork 0
forked from weaselab/conflict-set
Code Pull Requests Activity

Use a registry bot account for the container registry

Browse Source 
Gitea's ephemeral Actions token is not accepted by the container
registry, so docker login and image pulls use REGISTRY_USER /
REGISTRY_TOKEN secrets (a dedicated low-privilege account and its
personal access token with package read/write scope) instead.
This commit is contained in:
andrew
2026-06-12 11:16:33 -04:00
parent d74a12b5a4
commit 6eecf6e4ac
1 changed files with 11 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yml
+11 -9
View File
@@ -17,7 +17,9 @@ jobs:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
- name: Log in to registry - name: Log in to registry
run: docker login -u ${{ gitea.actor }} -p ${{ secrets.GITHUB_TOKEN }} git.weaselab.dev run: |
echo "${{ secrets.REGISTRY_TOKEN }}" \
| docker login -u "${{ secrets.REGISTRY_USER }}" --password-stdin git.weaselab.dev
- name: Build and push image if changed - name: Build and push image if changed
run: | run: |
@@ -44,8 +46,8 @@ jobs:
container: container:
image: git.weaselab.dev/weaselab/conflict-set-ci:latest-amd64 image: git.weaselab.dev/weaselab/conflict-set-ci:latest-amd64
credentials: credentials:
username: ${{ gitea.actor }} username: ${{ secrets.REGISTRY_USER }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.REGISTRY_TOKEN }}
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
@@ -75,8 +77,8 @@ jobs:
container: container:
image: git.weaselab.dev/weaselab/conflict-set-ci:latest-amd64 image: git.weaselab.dev/weaselab/conflict-set-ci:latest-amd64
credentials: credentials:
username: ${{ gitea.actor }} username: ${{ secrets.REGISTRY_USER }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.REGISTRY_TOKEN }}
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
@@ -127,8 +129,8 @@ jobs:
container: container:
image: git.weaselab.dev/weaselab/conflict-set-ci:latest-${{ matrix.arch }} image: git.weaselab.dev/weaselab/conflict-set-ci:latest-${{ matrix.arch }}
credentials: credentials:
username: ${{ gitea.actor }} username: ${{ secrets.REGISTRY_USER }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.REGISTRY_TOKEN }}
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
@@ -188,8 +190,8 @@ jobs:
container: container:
image: git.weaselab.dev/weaselab/conflict-set-ci:latest-amd64 image: git.weaselab.dev/weaselab/conflict-set-ci:latest-amd64
credentials: credentials:
username: ${{ gitea.actor }} username: ${{ secrets.REGISTRY_USER }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.REGISTRY_TOKEN }}
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4