From ea7f7f3b524527fc609252ca898c962929021408 Mon Sep 17 00:00:00 2001
From: jmug <u.g.a.mariano@gmail.com>
Date: Wed, 17 Jun 2026 22:24:26 -0700
Subject: [PATCH] chore: Use PAT for registry push.

See:
- https://github.com/go-gitea/gitea/issues/23642
- https://github.com/go-gitea/gitea/issues/29398
---
 .github/workflows/docker.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 4d5464fe..daf84907 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -16,7 +16,6 @@ jobs:
         runs-on: ubuntu-latest
         permissions:
             contents: read
-            packages: write
         steps:
             - name: Checkout
               uses: actions/checkout@v4
@@ -43,8 +42,8 @@ jobs:
               if: github.event_name == 'release'
               with:
                   registry: ${{ steps.registry.outputs.host }}
-                  username: ${{ github.actor }}
-                  password: ${{ github.token }}
+                  username: ${{ secrets.PACKAGE_PUBLISH_USERNAME }}
+                  password: ${{ secrets.PACKAGE_PUBLISH_TOKEN }}
             - name: Build and publish
               uses: docker/build-push-action@v6
               with: