From d11947c4638254592df87d0803990bfdd2ed9f6e Mon Sep 17 00:00:00 2001
From: xiaoxia <dev@xiaoxiaianji.com>
Date: Fri, 3 Jul 2026 19:04:29 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20Gitea=20Registry=E6=94=B9=E7=94=A8Action?=
 =?UTF-8?q?s=20token=E8=AE=A4=E8=AF=81=EF=BC=8C=E7=A1=AE=E4=BF=9Dpackages?=
 =?UTF-8?q?=E6=9D=83=E9=99=90?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/deploy.yml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 75f216b66..d83a5b567 100755
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -65,15 +65,16 @@ jobs:
     - name: Build and push staging API/Worker images
       shell: bash
       env:
-        GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+        GITEA_TOKEN: ${{ github.token }}
+        GITEA_ACTOR: ${{ github.actor }}
       run: |
         set -eu
         REGISTRY="172.30.18.198:5000"
         CACHE_REGISTRY="git.xiaoxiajianji.com/xiaoxia/xiaoxia-saas"
         CACHE_BRANCH="${GITHUB_REF_NAME//\//-}"
 
-        # 登录 Gitea Registry（用于构建缓存）
-        printf '%s' "${GITEA_TOKEN}" | docker login git.xiaoxiajianji.com -u xiaoxia --password-stdin
+        # 登录 Gitea Registry（用于构建缓存，用 Gitea Actions token，天然带当前 repo packages 权限）
+        printf '%s' "${GITEA_TOKEN}" | docker login git.xiaoxiajianji.com -u "${GITEA_ACTOR}" --password-stdin
 
         # 确保 buildx builder 可用
         docker buildx use default || docker buildx create --use --name default-builder 2>/dev/null || true