From ef33c6b82d9ca7642e33c827207afbfafc83fc62 Mon Sep 17 00:00:00 2001
From: Arne Baeumler <arne@br0tkasten.de>
Date: Sat, 17 Jan 2026 20:52:45 +0100
Subject: [PATCH] fix: add user/pass to trivy workflow

---
 .gitea/workflows/publish-docker.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.gitea/workflows/publish-docker.yml b/.gitea/workflows/publish-docker.yml
index 73737ac..e8e8287 100644
--- a/.gitea/workflows/publish-docker.yml
+++ b/.gitea/workflows/publish-docker.yml
@@ -51,6 +51,9 @@ jobs:
           ignore-unfixed: true
           vuln-type: 'os,library'
           severity: 'CRITICAL,HIGH'
+        env:
+          - TRIVY_USERNAME: ${{ secrets.PACKAGE_USER }}
+          - TRIVY_PASSWORD: ${{ secrets.PACKAGE_TOKEN }}
 
       # Step 3: If scan passes, Build and Push to Registry
       - name: Build and push Docker image