security(runner): remove plaintext token fallbacks, untrack .env, and enforce secret-only authentication

2026-09-26 18:57:06 +02:00
parent 079c6cb70f
commit b0066c9ea6
4 changed files with 6 additions and 11 deletions
@@ -27,8 +27,8 @@ jobs:
      - name: Log in to Gitea Container Registry
        run: |
          REGISTRY="gitea.eibl.tech"
-          USER="${{ secrets.PACKAGESUSER || secrets.GITEAUSER || secrets.packagesuser || 'me0nline' }}"
-          PASS="${{ secrets.GITEATOKEN || secrets.PACKAGESTOKEN || secrets.packagestoken || 'f64c72025024b0628479b889d871eb764d812951' }}"
+          USER="${{ secrets.GITEAUSER || secrets.PACKAGESUSER || github.actor }}"
+          PASS="${{ secrets.GITEATOKEN || secrets.PACKAGESTOKEN || secrets.TAG_TOKEN || github.token }}"
          echo "Logging in to ${REGISTRY} as ${USER}..."
          echo "${PASS}" | docker login "${REGISTRY}" -u "${USER}" --password-stdin