zegit-zoo/zegit-forgejo-runner
4
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: read the org-scoped ZEGIT_CI_PACKAGE_TOKEN, not a repo-local name #12

Merged
markus merged 1 commits from claude/ci/package-token-name into master 2026-09-08 07:25:03 +00:00
Conversation 0 Commits 1 Files Changed 1
+2 -2
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/build-image-gitea.yml
+2 -2
View File
@@ -90,11 +90,11 @@ jobs:
- name: Registry login - name: Registry login
if: ${{ steps.meta.outputs.push == 'true' }} if: ${{ steps.meta.outputs.push == 'true' }}
env: env:
TOKEN: ${{ secrets.ZEGIT_PACKAGE_TOKEN }} TOKEN: ${{ secrets.ZEGIT_CI_PACKAGE_TOKEN }}
run: | run: |
set -euo pipefail set -euo pipefail
if [ -z "${TOKEN:-}" ]; then if [ -z "${TOKEN:-}" ]; then
echo "::error::ZEGIT_PACKAGE_TOKEN is not set, so this dispatch would build an image and push nothing. Issue a package-write token and store it as this secret." echo "::error::ZEGIT_CI_PACKAGE_TOKEN is not visible to this run. It is the org-scoped package-write token every zegit-zoo image workflow uses (docs: flux-config docs/rotation/forge-secrets.yaml); this repository must be able to read the org secret, and the name must match."
exit 1 exit 1
fi fi
mkdir -p "$HOME/.docker" mkdir -p "$HOME/.docker"