From 3b87313c4f7d10df413ce90d3af34cec40b3e874 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 12 Oct 2022 07:12:13 +0000 Subject: [PATCH 1/3] Bump docker/login-action from 1.10.0 to 2.1.0 Bumps [docker/login-action](https://github.com/docker/login-action) from 1.10.0 to 2.1.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v1.10.0...v2.1.0) --- updated-dependencies: - dependency-name: docker/login-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/docker.build.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/docker.build.yml b/.github/workflows/docker.build.yml index 6ac496c..50a9577 100644 --- a/.github/workflows/docker.build.yml +++ b/.github/workflows/docker.build.yml @@ -37,7 +37,8 @@ jobs: ${{ runner.os }}-buildx- - name: Login to GitHub Container Registry - uses: docker/login-action@v1.10.0 + uses: docker/login-action@v2.1.0 + if: github.event_name != 'pull_request' with: registry: ghcr.io username: ${{ github.repository_owner }} From 2a9ee44a23132afd664d34d16b41ef62c0fd97ab Mon Sep 17 00:00:00 2001 From: Dat Date: Mon, 28 Sep 2026 15:10:23 +0200 Subject: [PATCH 2/3] ci: avoid GHCR push on pull_request and grant package write permission --- .github/workflows/docker.build.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/docker.build.yml b/.github/workflows/docker.build.yml index 50a9577..62269e5 100644 --- a/.github/workflows/docker.build.yml +++ b/.github/workflows/docker.build.yml @@ -6,6 +6,10 @@ on: - 'main' pull_request: +permissions: + contents: read + packages: write + jobs: docker-build: runs-on: ubuntu-latest @@ -52,7 +56,7 @@ jobs: platforms: linux/amd64 cache-from: type=local,src=/tmp/.buildx-cache cache-to: type=local,mode=max,dest=/tmp/.buildx-cache - push: true + push: ${{ github.event_name != 'pull_request' }} tags: ${{ steps.docker_meta.outputs.tags }} labels: ${{ steps.docker_meta.outputs.labels }} - From 4f922bf1bfa60a944d9ba000522193e2198d997e Mon Sep 17 00:00:00 2001 From: Dat Date: Mon, 28 Sep 2026 15:36:12 +0200 Subject: [PATCH 3/3] remove testing code --- .github/workflows/docker.build.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/docker.build.yml b/.github/workflows/docker.build.yml index 62269e5..2ac282d 100644 --- a/.github/workflows/docker.build.yml +++ b/.github/workflows/docker.build.yml @@ -41,8 +41,7 @@ jobs: ${{ runner.os }}-buildx- - name: Login to GitHub Container Registry - uses: docker/login-action@v2.1.0 - if: github.event_name != 'pull_request' + uses: docker/login-action@v1.10.0 with: registry: ghcr.io username: ${{ github.repository_owner }}