From 0439f74b302814208eaa4d66e200cc0752707adc Mon Sep 17 00:00:00 2001
From: Frederic Leger <frederic@webofmars.com>
Date: Mon, 9 Oct 2023 21:47:25 +0200
Subject: [PATCH] feat: use ghcrio login step

---
 .github/dependabot.yml      | 7 +++++++
 .github/workflows/build.yml | 9 +++++++--
 2 files changed, 14 insertions(+), 2 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..2797988
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,7 @@
+# .github/dependabot.yml
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly" # Check for updates to GitHub Actions every week
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3a8ca8e..fe365aa 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -37,12 +37,17 @@ jobs:
         env:
           TAG_OR_BRANCH: ${{ steps.refortag.outputs.value }}
 
+      - name: Login to github container registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ secrets.GHCRIO_USERNAME }}
+          password: ${{ secrets.GHCRIO_PASSWORD }}
+
       - name: Build and push image
         uses: docker/build-push-action@v5
         with:
           tags: ${{ env.IMAGE_NAME }}:${{ steps.imagetag.outputs.value }}
           file: Dockerfile
           platforms: ${{ env.PLATFORMS }}
-          secrets: |
-            "github_token=${{ secrets.CR_PAT }}"
           push: true