From 8fe637e0e27453e0790365e12014716068fabd1b Mon Sep 17 00:00:00 2001
From: Chris Farhood <chris@farhood.org>
Date: Sat, 16 May 2026 20:40:28 -0400
Subject: [PATCH] ci: pin registry login username to gitea-admin

REGISTRY_TOKEN was created under the gitea-admin user, so the
docker/helm registry username must match. Using github.actor
would fail for any other workflow-triggering user.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .gitea/workflows/ci.yml           | 4 ++--
 .gitea/workflows/helm-release.yml | 2 +-
 .gitea/workflows/release-beta.yml | 6 +++---
 .gitea/workflows/release.yml      | 6 +++---
 .gitea/workflows/rollback.yml     | 2 +-
 5 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 12abb11..dd9afef 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -59,7 +59,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push worker image
@@ -91,7 +91,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push API image
diff --git a/.gitea/workflows/helm-release.yml b/.gitea/workflows/helm-release.yml
index 452726b..e1a3f7a 100644
--- a/.gitea/workflows/helm-release.yml
+++ b/.gitea/workflows/helm-release.yml
@@ -32,7 +32,7 @@ jobs:
       - name: Log in to Gitea OCI registry
         run: |
           echo "${{ secrets.REGISTRY_TOKEN }}" | helm registry login git.farh.net \
-            --username "${{ github.actor }}" \
+            --username gitea-admin \
             --password-stdin
 
       - name: Push chart to Gitea OCI registry
diff --git a/.gitea/workflows/release-beta.yml b/.gitea/workflows/release-beta.yml
index e91064e..08df39a 100644
--- a/.gitea/workflows/release-beta.yml
+++ b/.gitea/workflows/release-beta.yml
@@ -62,7 +62,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push worker image
@@ -93,7 +93,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push API image
@@ -125,7 +125,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Inspect worker image
diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index ca159d5..9656246 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -77,7 +77,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push worker image
@@ -111,7 +111,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push API image
@@ -145,7 +145,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Inspect worker image
diff --git a/.gitea/workflows/rollback.yml b/.gitea/workflows/rollback.yml
index 0d9637d..c72e098 100644
--- a/.gitea/workflows/rollback.yml
+++ b/.gitea/workflows/rollback.yml
@@ -78,7 +78,7 @@ jobs:
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           registry: git.farh.net
-          username: ${{ github.actor }}
+          username: gitea-admin
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Verify Docker image tag exists