From ae098261eff69bb3342dcc0d9bcc5dc3f42daaec Mon Sep 17 00:00:00 2001
From: MrSphay <lefiwilkens@gmail.com>
Date: Thu, 14 May 2026 17:48:16 +0200
Subject: [PATCH] Use registry token for image publishing

---
 .codex/project.md          |  2 ++
 .gitea/workflows/build.yml |  4 ++--
 README.md                  | 14 ++++++++++++++
 3 files changed, 18 insertions(+), 2 deletions(-)

diff --git a/.codex/project.md b/.codex/project.md
index 4a7d709..ecd1af4 100644
--- a/.codex/project.md
+++ b/.codex/project.md
@@ -32,6 +32,8 @@ Container image from `Dockerfile` published by Gitea Actions:
 git.wilkensxl.de/mrsphay/dockge-image-update-checker:latest
 ```
 
+Publishing requires a repository Actions secret named `REGISTRY_TOKEN` with package write access for `MrSphay`.
+
 ## Notes
 
 Dockge does not currently expose a stable documented plugin API. This repository is structured as a read-only companion service that can run beside Dockge and inspect the same stack directory plus Docker Engine metadata.
diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 9c144b0..67a3647 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -43,8 +43,8 @@ jobs:
         uses: docker/login-action@v3
         with:
           registry: git.wilkensxl.de
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          username: MrSphay
+          password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Build and push image
         uses: docker/build-push-action@v6
diff --git a/README.md b/README.md
index 14a3857..17b2ab6 100644
--- a/README.md
+++ b/README.md
@@ -64,6 +64,20 @@ services:
 
 If your Dockge stacks directory is not `/opt/stacks`, change both the host-side volume path and `STACKS_DIR`.
 
+The Gitea workflow publishes this image to the registry:
+
+```text
+git.wilkensxl.de/mrsphay/dockge-image-update-checker:latest
+```
+
+Repository secret required for publishing:
+
+```text
+REGISTRY_TOKEN
+```
+
+`REGISTRY_TOKEN` must be a Gitea access token for `MrSphay` with package write access.
+
 For local development you can still build from source:
 
 ```yaml