rock/poimen-workflows
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: use env vars for docker registry credentials #4

Merged
rock merged 4 commits from fix/registry-login-env into main 2026-09-07 06:48:28 +00:00
Conversation 0 Commits 4 Files Changed 1
+15 -6
rock commented 2026-09-07 06:38:16 +00:00
Owner
Copy Link
Copy Source

Fix registry login by passing FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN via environment variables instead of direct secret interpolation.

Uses the proven pattern from riotpiao.com reference commit.

This prevents credentials from being exposed in logs or shell history while keeping the standard docker login approach.

After merge + org-level secrets configured:

  • All repos inherit FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN
  • CI validates credentials exist before docker login
  • Image pushed to registry on main push
Fix registry login by passing FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN via environment variables instead of direct secret interpolation. Uses the proven pattern from riotpiao.com reference commit. This prevents credentials from being exposed in logs or shell history while keeping the standard docker login approach. After merge + org-level secrets configured: - All repos inherit FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN - CI validates credentials exist before docker login - Image pushed to registry on main push
rock added 3 commits 2026-09-07 06:38:17 +00:00
fix: standardize poimen-workflows CI to unified pattern
CI / Test (pull_request) Successful in 2m35s
Details
CI / Build & Push Image (pull_request) Skipped
Details
3d1360a135 
Unified pattern enforced:
- test job: runs on all branches + PRs
- build-push job: only on main push, depends on test
- Proper env vars (GOPRIVATE, REGISTRY, IMAGE)
- Install Node.js before checkout
- Install docker only in build-push
- Docker login + build + push + prune
fix: validate registry credentials before docker login b0a8e4bd5c 
Add credential validation step to catch missing secrets early with clear error message.
Use direct secret injection (not env vars) for better security.
Isolate docker config to /tmp/docker-config.
fix: use env vars for docker registry credentials
CI / Test (pull_request) Successful in 2m24s
Details
CI / Build & Push Image (pull_request) Skipped
Details
101ba70b57 
Pass FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN via environment
variables instead of direct secret interpolation. This is the standard
approach used across all repos and prevents credentials from being exposed
in logs or shell history.

Fixes registry login failures by using the proven pattern from riotpiao.com.
rock added 1 commit 2026-09-07 06:40:50 +00:00
fix: use env vars for docker registry credentials
CI / Test (pull_request) Successful in 2m24s
Details
CI / Build & Push Image (pull_request) Skipped
Details
984e6f5d6e 
Pass FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN via environment
variables instead of direct secret interpolation. This is the standard
approach used across all repos and prevents credentials from being exposed
in logs or shell history.

Fixes registry login failures by using the proven pattern.
rock force-pushed fix/registry-login-env from dab2cd9e90 to 984e6f5d6e 2026-09-07 06:40:50 +00:00 Compare
rock merged commit 45b7f8ca61 into main 2026-09-07 06:48:28 +00:00
rock deleted branch fix/registry-login-env 2026-09-07 06:48:32 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
rock (Rock)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: rock/poimen-workflows#4