Skip to content

[codex] Use workflow token for dev GHCR pull#307

Draft
jjoonleo wants to merge 1 commit intodevfrom
codexd/fix-dev-ghcr-pull-token
Draft

[codex] Use workflow token for dev GHCR pull#307
jjoonleo wants to merge 1 commit intodevfrom
codexd/fix-dev-ghcr-pull-token

Conversation

@jjoonleo
Copy link
Copy Markdown
Contributor

@jjoonleo jjoonleo commented May 8, 2026

Summary

  • use the workflow-scoped GITHUB_TOKEN for the remote PC GHCR login during dev deploy
  • remove GHCR_USERNAME/GHCR_READ_TOKEN from development deploy requirements in docs

Why

The remote PC login succeeded but docker compose pull returned denied for ghcr.io/devkor-github/ontime-back, which indicates the PAT used by GHCR_READ_TOKEN did not have package access for that image. The workflow token has package permissions for the image it just pushed, so it is the right token for this deploy pull.

Validation

  • parsed .github/workflows/deploy-dev.yml with Ruby YAML loader
  • docker compose -f docker-compose.yml -f docker-compose.dev.yml config

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant