CI Failure: Build Docker Image - Registry token lacks package write permission #2

Closed
opened 2026-03-03 14:39:54 -08:00 by ci · 0 comments
Collaborator

CI Failure Analysis

Run URL: https://git.brads.house/brad/bluesky-dicebot/actions/runs/3
Commit: 3fb56b77af
Attempts: 2/3 (1 remaining)
Workflow: Build Docker Image (build.yml)

Error

unauthorized: reqPackageAccess

Root Cause

The REGISTRY_TOKEN secret used for Docker registry login does not have sufficient permissions to push packages to the container registry.

Evidence

  1. Docker login to git.brads.house succeeded (logs show Login Succeeded)
  2. Docker build completed successfully for arm64 platform
  3. Push to git.brads.house/brad/bluesky-dicebot:latest and git.brads.house/brad/bluesky-dicebot:arm64 failed with unauthorized: reqPackageAccess

Resolution Required

The REGISTRY_TOKEN secret needs to be regenerated with the write:package scope (or equivalent package registry write permission) to allow Docker image pushes.

Steps:

  1. Go to Forgejo Settings → Actions → Secrets
  2. Update REGISTRY_TOKEN with a new token that includes write permissions for packages/container registry
  3. Retrigger the workflow to verify

@brad - requires secret token update with write:package permission

## CI Failure Analysis **Run URL:** https://git.brads.house/brad/bluesky-dicebot/actions/runs/3 **Commit:** 3fb56b77afe314bef711ebe586584a845d2ddecd **Attempts:** 2/3 (1 remaining) **Workflow:** Build Docker Image (build.yml) ### Error ``` unauthorized: reqPackageAccess ``` ### Root Cause The `REGISTRY_TOKEN` secret used for Docker registry login does not have sufficient permissions to push packages to the container registry. ### Evidence 1. Docker login to `git.brads.house` succeeded (logs show `Login Succeeded`) 2. Docker build completed successfully for `arm64` platform 3. Push to `git.brads.house/brad/bluesky-dicebot:latest` and `git.brads.house/brad/bluesky-dicebot:arm64` failed with `unauthorized: reqPackageAccess` ### Resolution Required The `REGISTRY_TOKEN` secret needs to be regenerated with the `write:package` scope (or equivalent package registry write permission) to allow Docker image pushes. **Steps:** 1. Go to Forgejo Settings → Actions → Secrets 2. Update `REGISTRY_TOKEN` with a new token that includes write permissions for packages/container registry 3. Retrigger the workflow to verify @brad - requires secret token update with write:package permission
brad closed this issue 2026-03-03 15:02:11 -08:00
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
brad/bluesky-dicebot#2
No description provided.