scope docker credentials

.gitea/workflows/build.yaml

@@ -7,7 +7,7 @@ on:
 env:
   ENDPOINT: services-3
   STACK: mastodon
-  IMAGE: mastodon/mastobot
+  IMAGE: docker/mastobot
   TAG: ${{ gitea.ref_name }}
   CACHE_NAME: cache-python-dependencies-mastobot
   RUNNER_TOOL_CACHE: /toolcache
@@ -31,14 +31,16 @@ jobs:
           registry: ${{ secrets.DOCKER_REGISTRY }}
           username: ${{ secrets.DOCKER_REGISTRY_USER }}
           password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
+          scope: ${{secrets.DOCKER_REGISTRY}}/${{env.IMAGE}}@push
+          logout: true
       - name: Build and push Docker image
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           file: ./Dockerfile
           push: true
-          build-arg: |
-            VERSION=${{env.TAG}}
+          build-args: |
+            version=${{env.TAG}}
           tags: |
             ${{secrets.DOCKER_REGISTRY}}/${{env.IMAGE}}:${{env.TAG}}
             ${{secrets.DOCKER_REGISTRY}}/${{env.IMAGE}}:latest

Dockerfile

@@ -6,6 +6,7 @@ COPY ./app /code/app
 COPY ./log_config.yml /code/log_config.yml
 ARG version
 ENV VERSION=${version}
+RUN echo "Build Version: $VERSION"
 HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
   CMD wget --spider --quiet --tries=1 --timeout=5 --server-response http://127.0.0.1:8000/health 2>&1 | grep "200 OK" > /dev/null
 CMD ["uvicorn", "main:app", "--app-dir", "app", "--log-config", "log_config.yml", "--host","0.0.0.0", "--port", "8000"]