Docker: only write to cache if creds available

.github/scripts/docker-build.bash

@@ -1,12 +1,17 @@
 #!/usr/bin/env bash
 set -ex
 
-DOCKERHUB_USERNAME="${DOCKERHUB_USERNAME:-conky}"
-DOCKERHUB_IMAGE_ID=$DOCKERHUB_USERNAME/$IMAGE_NAME
+DH_USERNAME="${DOCKERHUB_USERNAME:-conky}"
+DOCKERHUB_IMAGE_ID=$DH_USERNAME/$IMAGE_NAME
 
 # Change all uppercase to lowercase
 DOCKERHUB_IMAGE_ID=$(echo $DOCKERHUB_IMAGE_ID | tr '[A-Z]' '[a-z]')
 
+# Only build amd64 on PRs, build all platforms on main. The arm builds
+# take far too long.
+image_platforms="--platform linux/amd64"
+push_image=""
+cache_tag="pr-cache"
 image_tags=()
 
 # Strip git ref prefix from version
@@ -24,23 +29,24 @@ if [[ "$RELEASE" == ON ]]; then
     image_tags+=("--tag" "$DOCKERHUB_IMAGE_ID:latest")
 fi
 
-# Only build amd64 on PRs, build all platforms on main. The arm builds
-# take far too long.
-image_platforms="--platform linux/amd64"
-push_image=""
-cache_tag="pr-cache"
-
 # Only push on main
 if [[ "$GITHUB_REF" == refs/heads/main ]]; then
     push_image="--push"
     image_platforms="--platform linux/arm/v7,linux/arm64/v8,linux/amd64"
     cache_tag="main-cache"
 fi
 
+# Only write to cache if credentials are available
+if [[ -z "$DOCKERHUB_USERNAME" ]]; then
+    write_cache=""
+else
+    write_cache="--cache-to=type=registry,ref=$DOCKERHUB_IMAGE_ID:$cache_tag,mode=max"
+fi
+
 docker buildx build \
     ${push_image} \
     ${image_platforms} \
-    --cache-from=type=registry,ref=$DOCKERHUB_USERNAME/$IMAGE_NAME:$cache_tag \
-    --cache-to=type=registry,ref=$DOCKERHUB_USERNAME/$IMAGE_NAME:$cache_tag,mode=max \
+    --cache-from=type=registry,ref=$DOCKERHUB_IMAGE_ID:$cache_tag \
+    ${write_cache} \
     "${image_tags[@]}" \
     .