From 4f69ae010e91c7330668be91c8cf6a789d92cfb7 Mon Sep 17 00:00:00 2001
From: Jacob Hagstedt <jacob.hagstedt@gmail.com>
Date: Mon, 19 Oct 2026 19:35:19 +0200
Subject: [PATCH] Gitea workflow: registry login with the secret in the run
 line (env form came through empty on act_runner 0.6.1)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TQd3pEP9UeN2uifbHknQ7B
---
 .gitea/workflows/build-images.yaml | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/.gitea/workflows/build-images.yaml b/.gitea/workflows/build-images.yaml
index f4df82a..c4dbb8c 100644
--- a/.gitea/workflows/build-images.yaml
+++ b/.gitea/workflows/build-images.yaml
@@ -46,11 +46,9 @@ jobs:
       - name: Install Git and Docker CLI
         run: apk add --no-cache git docker-cli docker-cli-buildx
       - name: Log in to Gitea Container Registry
-        # The token reaches the shell as an environment variable, never as text inside the script.
-        env:
-          REGISTRY_TOKEN: ${{ secrets.kvitt_cicd }}
-          REGISTRY_USER: ${{ github.actor }}
-        run: printf '%s' "$REGISTRY_TOKEN" | docker login "$REGISTRY_HOST" -u "$REGISTRY_USER" --password-stdin
+        # The owner's proven form: the secret interpolated into the run line (act_runner masks it in the log).
+        # The env-based form (env: REGISTRY_TOKEN: ${{ secrets.kvitt_cicd }}) came through empty on act_runner 0.6.1.
+        run: printf '%s' "${{ secrets.kvitt_cicd }}" | docker login "$REGISTRY_HOST" -u "${{ github.actor }}" --password-stdin
       - name: Create Custom Buildx Builder for HTTP
         run: |
           # Create the builder once and reuse it, so its BuildKit cache (cargo registry, target) survives runs.