diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 75f216b66..d83a5b567 100755
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -65,15 +65,16 @@ jobs:
     - name: Build and push staging API/Worker images
       shell: bash
       env:
-        GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+        GITEA_TOKEN: ${{ github.token }}
+        GITEA_ACTOR: ${{ github.actor }}
       run: |
         set -eu
         REGISTRY="172.30.18.198:5000"
         CACHE_REGISTRY="git.xiaoxiajianji.com/xiaoxia/xiaoxia-saas"
         CACHE_BRANCH="${GITHUB_REF_NAME//\//-}"
 
-        # 登录 Gitea Registry（用于构建缓存）
-        printf '%s' "${GITEA_TOKEN}" | docker login git.xiaoxiajianji.com -u xiaoxia --password-stdin
+        # 登录 Gitea Registry（用于构建缓存，用 Gitea Actions token，天然带当前 repo packages 权限）
+        printf '%s' "${GITEA_TOKEN}" | docker login git.xiaoxiajianji.com -u "${GITEA_ACTOR}" --password-stdin
 
         # 确保 buildx builder 可用
         docker buildx use default || docker buildx create --use --name default-builder 2>/dev/null || true