From 82e281457e67e34e82232df4b6d812f063500a99 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Oct 2022 04:10:31 +0000 Subject: [PATCH 1/3] Bump docker/login-action from 1.10.0 to 2.1.0 Bumps [docker/login-action](https://github.com/docker/login-action) from 1.10.0 to 2.1.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v1.10.0...v2.1.0) --- updated-dependencies: - dependency-name: docker/login-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/docker.build.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/docker.build.yml b/.github/workflows/docker.build.yml index a8517c5..9eddcc7 100644 --- a/.github/workflows/docker.build.yml +++ b/.github/workflows/docker.build.yml @@ -37,7 +37,8 @@ jobs: ${{ runner.os }}-buildx- - name: Login to GitHub Container Registry - uses: docker/login-action@v1.10.0 + uses: docker/login-action@v2.1.0 + if: github.event_name != 'pull_request' with: registry: ghcr.io username: ${{ github.repository_owner }} From 8f4ec994c3c9044ab35a2a42da045b128c3c1fc2 Mon Sep 17 00:00:00 2001 From: Dat Date: Mon, 28 Sep 2026 15:07:37 +0200 Subject: [PATCH 2/3] ci: avoid GHCR push on pull_request and grant package write permission --- .github/workflows/docker.build.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/docker.build.yml b/.github/workflows/docker.build.yml index 9eddcc7..aec0901 100644 --- a/.github/workflows/docker.build.yml +++ b/.github/workflows/docker.build.yml @@ -6,6 +6,10 @@ on: - 'main' pull_request: +permissions: + contents: read + packages: write + jobs: docker-build: runs-on: ubuntu-latest @@ -52,7 +56,7 @@ jobs: platforms: linux/amd64 cache-from: type=local,src=/tmp/.buildx-cache cache-to: type=local,mode=max,dest=/tmp/.buildx-cache - push: true + push: ${{ github.event_name != 'pull_request' }} tags: ${{ steps.docker_meta.outputs.tags }} labels: ${{ steps.docker_meta.outputs.labels }} - From 1e30cbd7ce0333a9c42fef59bfc68a1fe205425b Mon Sep 17 00:00:00 2001 From: Dat Date: Mon, 28 Sep 2026 15:35:31 +0200 Subject: [PATCH 3/3] remove testing code --- .github/workflows/docker.build.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/docker.build.yml b/.github/workflows/docker.build.yml index aec0901..01410e5 100644 --- a/.github/workflows/docker.build.yml +++ b/.github/workflows/docker.build.yml @@ -41,8 +41,7 @@ jobs: ${{ runner.os }}-buildx- - name: Login to GitHub Container Registry - uses: docker/login-action@v2.1.0 - if: github.event_name != 'pull_request' + uses: docker/login-action@v1.10.0 with: registry: ghcr.io username: ${{ github.repository_owner }}