From 143f07deebe821eaac59b8b0bbf59a877283e68b Mon Sep 17 00:00:00 2001 From: Dmitry Verkhoturov Date: Thu, 28 Jul 2022 00:55:35 +0200 Subject: [PATCH] hardcode dockerhub username and ghcr.io repo for site docker push Currently, such a build most likely has access to secrets but fails due to the wrong username logging with DockerHub when rebase is done by anyone but @umputun. --- .github/workflows/ci-site.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci-site.yml b/.github/workflows/ci-site.yml index f74f041e8c..1d26688932 100644 --- a/.github/workflows/ci-site.yml +++ b/.github/workflows/ci-site.yml @@ -45,7 +45,7 @@ jobs: echo GITHUB_REF - $ref echo ${GITHUB_PACKAGE_TOKEN} | docker login ghcr.io -u ${USERNAME} --password-stdin docker buildx build --push --no-cache --platform linux/amd64,linux/arm/v7,linux/arm64 \ - -t ghcr.io/${USERNAME}/remark42-site:${ref} . + -t ghcr.io/umputun/remark42-site:${ref} . - name: deploy tagged (latest) to ghcr.io and dockerhub if: ${{ startsWith(github.ref, 'refs/tags/') }} @@ -60,7 +60,7 @@ jobs: echo "GITHUB_REF=$ref, GITHUB_SHA=${GITHUB_SHA}" echo ${GITHUB_PACKAGE_TOKEN} | docker login ghcr.io -u ${USERNAME} --password-stdin docker buildx build --push --no-cache --platform linux/amd64,linux/arm/v7,linux/arm64 \ - -t ghcr.io/${USERNAME}/remark42-site:${ref} -t ghcr.io/${USERNAME}/remark42-site:latest . + -t ghcr.io/umputun/remark42-site:${ref} -t ghcr.io/${USERNAME}/remark42-site:latest . - name: remote site deployment from master if: ${{ github.ref == 'refs/heads/master' }}