ci: read the org-scoped ZEGIT_CI_PACKAGE_TOKEN, not a repo-local name #12

Merged
markus merged 1 commits from claude/ci/package-token-name into master 2026-09-08 07:25:03 +00:00
Member

Dispatch runs 18 and 20 failed at Registry login because this workflow read secrets.ZEGIT_PACKAGE_TOKEN — a name that exists nowhere. The package-write token every zegit-zoo image workflow logs in with is ZEGIT_CI_PACKAGE_TOKEN, held above repository scope, so it is readable here under its real name. One-word fix; no second token, no second copy to rotate.

After merge I dispatch build image (gitea) with tag 12.11.1-ci7 and follow it to the published digest.

Agent-Session: db2d99bf-cb35-5418-bff1-3b0aad3ee428

Dispatch runs 18 and 20 failed at *Registry login* because this workflow read `secrets.ZEGIT_PACKAGE_TOKEN` — a name that exists nowhere. The package-write token every zegit-zoo image workflow logs in with is `ZEGIT_CI_PACKAGE_TOKEN`, held above repository scope, so it is readable here under its real name. One-word fix; no second token, no second copy to rotate. After merge I dispatch `build image (gitea)` with tag `12.11.1-ci7` and follow it to the published digest. Agent-Session: db2d99bf-cb35-5418-bff1-3b0aad3ee428
agent added 1 commit 2026-09-08 07:05:58 +00:00
The publish path failed at registry login on every dispatch (runs 18,
20) because it read `secrets.ZEGIT_PACKAGE_TOKEN`, a name that exists
nowhere. The package-write token every zegit-zoo image workflow uses is
ZEGIT_CI_PACKAGE_TOKEN, held above repository scope, so this repository
can read it under that name — no second token, no second copy to rotate.
agent marked the pull request as ready for review 2026-09-08 07:07:20 +00:00
markus merged commit 96ba41dfbf into master 2026-09-08 07:25:03 +00:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: zegit-zoo/zegit-forgejo-runner#12