From 6ecf1a4d4d03fddebe691f4389a66ebc7e704b21 Mon Sep 17 00:00:00 2001
From: Chris Farhood <chris@farhood.org>
Date: Sun, 19 Apr 2026 14:12:53 -0400
Subject: [PATCH] fix(ci): switch to GHCR (ghcr.io/farhoodliquor) from Docker
 Hub

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .github/workflows/ci.yml            | 16 +++++++++-------
 apps/api/infra/base/deployment.yaml |  4 ++--
 2 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a146483..1c41df2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -46,6 +46,7 @@ jobs:
     runs-on: runners-farhoodliquor
     permissions:
       contents: read
+      packages: write
 
     steps:
       - name: Checkout
@@ -54,11 +55,12 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
 
-      - name: Log in to Docker Hub
+      - name: Log in to GHCR
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push worker image
         uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
@@ -66,8 +68,8 @@ jobs:
           context: .
           push: true
           tags: |
-            keygraph/shannon:latest
-            keygraph/shannon:sha-${{ github.sha }}
+            ghcr.io/farhoodliquor/shannon:latest
+            ghcr.io/farhoodliquor/shannon:sha-${{ github.sha }}
 
       - name: Build and push API image
         uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
@@ -76,5 +78,5 @@ jobs:
           file: apps/api/Dockerfile
           push: true
           tags: |
-            keygraph/shannon-api:latest
-            keygraph/shannon-api:sha-${{ github.sha }}
+            ghcr.io/farhoodliquor/shannon-api:latest
+            ghcr.io/farhoodliquor/shannon-api:sha-${{ github.sha }}
diff --git a/apps/api/infra/base/deployment.yaml b/apps/api/infra/base/deployment.yaml
index 51e72d8..5612036 100644
--- a/apps/api/infra/base/deployment.yaml
+++ b/apps/api/infra/base/deployment.yaml
@@ -18,7 +18,7 @@ spec:
       serviceAccountName: shannon-api
       containers:
         - name: api
-          image: keygraph/shannon-api:latest
+          image: ghcr.io/farhoodliquor/shannon-api:latest
           ports:
             - containerPort: 3000
               name: http
@@ -26,7 +26,7 @@ spec:
             - name: TEMPORAL_ADDRESS
               value: shannon-temporal:7233
             - name: WORKER_IMAGE
-              value: keygraph/shannon:latest
+              value: ghcr.io/farhoodliquor/shannon:latest
             - name: K8S_NAMESPACE
               value: shannon
           envFrom: