zegit-zoo/zegit-forgejo-runner
4
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'ci: read the org-scoped ZEGIT_CI_PACKAGE_TOKEN, not a repo-local name' (#12) from claude/ci/package-token-name into master
build image (gitea) / build (push) Successful in 6s
Details

Browse Source 
Reviewed-on: #12
This commit was merged in pull request #12.
This commit is contained in:
markus committed 2026-09-08 07:25:02 +00:00
2 parents 02cd70092e b38f4760e7
commit 96ba41dfbf
1 file changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/build-image-gitea.yml
+2 -2
View File
@@ -90,11 +90,11 @@ jobs:
- name: Registry login - name: Registry login
if: ${{ steps.meta.outputs.push == 'true' }} if: ${{ steps.meta.outputs.push == 'true' }}
env: env:
TOKEN: ${{ secrets.ZEGIT_PACKAGE_TOKEN }} TOKEN: ${{ secrets.ZEGIT_CI_PACKAGE_TOKEN }}
run: | run: |
set -euo pipefail set -euo pipefail
if [ -z "${TOKEN:-}" ]; then if [ -z "${TOKEN:-}" ]; then
echo "::error::ZEGIT_PACKAGE_TOKEN is not set, so this dispatch would build an image and push nothing. Issue a package-write token and store it as this secret." echo "::error::ZEGIT_CI_PACKAGE_TOKEN is not visible to this run. It is the org-scoped package-write token every zegit-zoo image workflow uses (docs: flux-config docs/rotation/forge-secrets.yaml); this repository must be able to read the org secret, and the name must match."
exit 1 exit 1
fi fi
mkdir -p "$HOME/.docker" mkdir -p "$HOME/.docker"