From 3645c6cbc82b5172546303e404ddc8a27f162eb4 Mon Sep 17 00:00:00 2001 From: Lucas Rayan Date: Sun, 1 Nov 2026 21:41:44 -0300 Subject: [PATCH] ci: autentica no registro com o token do job, sem secret Co-Authored-By: Claude Sonnet 5.5 --- .gitea/workflows/ci.yml | 2 +- .gitea/workflows/release.yml | 3 +-- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index f31f05d..01c1c08 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -83,7 +83,7 @@ jobs: with: registry: ${{ env.REGISTRY }} username: ${{ gitea.actor }} - password: ${{ secrets.REGISTRY_TOKEN }} + password: ${{ gitea.token }} # `docker build` simples, no daemon persistente do runner: as camadas e o # cache mount do npm sobrevivem entre execuções. Um buildx criaria um diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml index 9778fed..052f210 100644 --- a/.gitea/workflows/release.yml +++ b/.gitea/workflows/release.yml @@ -2,7 +2,6 @@ name: Release # Publica a imagem no registro de containers do Gitea depois de um merge em main, # e de novo com tag semver quando uma tag v* é enviada. O servidor só faz pull. -# Precisa do secret de usuário REGISTRY_TOKEN (token do Gitea com write:package). on: push: branches: [main] @@ -64,7 +63,7 @@ jobs: with: registry: ${{ env.REGISTRY }} username: ${{ gitea.actor }} - password: ${{ secrets.REGISTRY_TOKEN }} + password: ${{ gitea.token }} - name: Metadados id: meta