diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index c8885f0..a4bf52c 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -300,8 +300,12 @@ jobs:
       - name: docker login
         run: |
           set -o pipefail
-          echo "${{ secrets.GITHUB_TOKEN }}" \
-            | docker login "$REGISTRY" -u "${{ github.actor }}" --password-stdin
+          # Приоритет — секрет с правом write:package (REGISTRY_TOKEN), иначе встроенный токен Actions.
+          TOKEN="${{ secrets.REGISTRY_TOKEN }}"
+          if [ -z "$TOKEN" ]; then
+            TOKEN="${{ secrets.GITHUB_TOKEN }}"
+          fi
+          echo "$TOKEN" | docker login "$REGISTRY" -u "${{ github.actor }}" --password-stdin
 
       - name: "push staging-<sha>"
         run: |