From ea9e9556f4179817bc3ef387adb5e36bf9b2df7e Mon Sep 17 00:00:00 2001
From: John Ahlroos <john@ahlroos.me>
Date: Tue, 24 Feb 2026 20:12:53 +0100
Subject: [PATCH] scope docker credentials

---
 .gitea/workflows/build.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
index f34cf5f..f65febc 100644
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@@ -31,6 +31,8 @@ jobs:
           registry: ${{ secrets.DOCKER_REGISTRY }}
           username: ${{ secrets.DOCKER_REGISTRY_USER }}
           password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
+          scope: ${{secrets.DOCKER_REGISTRY}}/${{env.IMAGE}}@push
+          logout: true
       - name: Build and push Docker image
         uses: docker/build-push-action@v6
         with: