From 60521b1d7bf42a1a5cd4aacdb4082fb8c99e7f78 Mon Sep 17 00:00:00 2001
From: embeddevio <embeddev.iot@gmail.com>
Date: Wed, 28 Oct 2026 22:32:42 +0300
Subject: [PATCH] =?UTF-8?q?ci(verify):=20=D1=82=D0=BE=D0=BA=D0=B5=D0=BD=20?=
 =?UTF-8?q?=D0=B4=D0=BB=D1=8F=20registry=20=E2=80=94=20secret=20REGISTRY?=
 =?UTF-8?q?=5FTOKEN=20=D1=81=20fallback=20=D0=BD=D0=B0=20GITHUB=5FTOKEN?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Refs #17
---
 .gitea/workflows/ci.yml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index c8885f0..a4bf52c 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -300,8 +300,12 @@ jobs:
       - name: docker login
         run: |
           set -o pipefail
-          echo "${{ secrets.GITHUB_TOKEN }}" \
-            | docker login "$REGISTRY" -u "${{ github.actor }}" --password-stdin
+          # Приоритет — секрет с правом write:package (REGISTRY_TOKEN), иначе встроенный токен Actions.
+          TOKEN="${{ secrets.REGISTRY_TOKEN }}"
+          if [ -z "$TOKEN" ]; then
+            TOKEN="${{ secrets.GITHUB_TOKEN }}"
+          fi
+          echo "$TOKEN" | docker login "$REGISTRY" -u "${{ github.actor }}" --password-stdin
 
       - name: "push staging-<sha>"
         run: |