From 223abe1b865fff9002c20fc4cd70a6f3e2030465 Mon Sep 17 00:00:00 2001
From: Jim Martens <github@2martens.de>
Date: Fri, 3 Oct 2025 15:44:47 +0200
Subject: [PATCH] fix: GITHUB_TOKEN is a secret

---
 .github/workflows/docker-image.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/docker-image.yaml b/.github/workflows/docker-image.yaml
index d987944..3cf76b8 100644
--- a/.github/workflows/docker-image.yaml
+++ b/.github/workflows/docker-image.yaml
@@ -39,13 +39,13 @@ jobs:
         run: gradle -Prelease.useLastTag=true final jib
         env:
           USERNAME: ${{ github.actor }}
-          PASSWORD: ${{ GITHUB_TOKEN }}
+          PASSWORD: ${{ secrets.GITHUB_TOKEN }}
       - name: Create and publish docker image
         if: github.event_name == 'pull_request'
         run: gradle snapshot jib
         env:
           USERNAME: ${{ github.actor }}
-          PASSWORD: ${{ GITHUB_TOKEN }}
+          PASSWORD: ${{ secrets.GITHUB_TOKEN }}
       - name: Extract Jib digest
         id: digest
         run: |
@@ -63,7 +63,7 @@ jobs:
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
-          password: ${{ GITHUB_TOKEN }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - name: Extract metadata (tags, labels) for Docker
         id: meta
         uses: docker/metadata-action@v5