From 8bf80a9890081d5eca4c33d6fcdf0f8369dea20b Mon Sep 17 00:00:00 2001
From: Savannah Savings <savannah@cartsnitch.com>
Date: Mon, 25 May 2026 00:04:25 +0000
Subject: [PATCH] fix(ci): use REGISTRY_TOKEN for container registry auth
 (CAR-973)

The REGISTRY_TOKEN secret has write:package scope for git.farh.net.
This fixes the unauthorized error at docker login.

Related: CAR-1023 (REGISTRY_TOKEN setup), CAR-1009 (CI registry token standardization)

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 .gitea/workflows/ci.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index d563893..46a8e04 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -43,8 +43,11 @@ jobs:
           echo "version=$VERSION" >> "$GITHUB_OUTPUT"
 
       - name: Log in to Gitea Container Registry
-        run: |
-          echo "${{ secrets.GITEA_TOKEN }}" | docker login ${{ env.REGISTRY }} --username "cs_betty" --password-stdin
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Extract metadata
         id: meta