From 7bab6a55db52532da152c9f78f90a75e6d255137 Mon Sep 17 00:00:00 2001
From: Marc Mintel <marc@mintel.me>
Date: Tue, 3 Mar 2026 19:49:46 +0100
Subject: [PATCH] fix(ci): use login-action for reliable buildx authentication
 on Gitea registry

---
 .gitea/workflows/deploy.yml | 32 ++++++--------------------------
 1 file changed, 6 insertions(+), 26 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index ba1f2f3b..98713d44 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -205,32 +205,12 @@ jobs:
         uses: actions/checkout@v4
       - name: 🐳 Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
-      - name: 🔐 Discover Valid Registry Token
-        id: discover_token
-        run: |
-          echo "Testing available secrets against git.infra.mintel.me Docker registry..."
-          TOKENS="${{ secrets.GITEA_PAT }} ${{ secrets.MINTEL_PRIVATE_TOKEN }} ${{ secrets.NPM_TOKEN }}"
-          USERS="${{ github.repository_owner }} ${{ github.actor }} marcmintel mintel mmintel"
-
-          for TOKEN in $TOKENS; do
-            if [ -n "$TOKEN" ]; then
-              for U in $USERS; do
-                if [ -n "$U" ]; then
-                  echo "Attempting docker login for a token with user $U..."
-                  if echo "$TOKEN" | docker login git.infra.mintel.me -u "$U" --password-stdin > /dev/null 2>&1; then
-                    echo "✅ Successfully authenticated with a token."
-                    echo "::add-mask::$TOKEN"
-                    echo "token=$TOKEN" >> $GITHUB_OUTPUT
-                    echo "NPM_TOKEN=$TOKEN" >> $GITHUB_ENV
-                    echo "user=$U" >> $GITHUB_OUTPUT
-                    exit 0
-                  fi
-                fi
-              done
-            fi
-          done
-          echo "❌ All available tokens failed to authenticate!"
-          exit 1
+      - name: 🔐 Registry Login
+        uses: docker/login-action@v3
+        with:
+          registry: git.infra.mintel.me
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.NPM_TOKEN }}
       - name: 🏗️ Build and Push
         uses: docker/build-push-action@v5
         with: