.gitea/actions/buildkit-build-push/action.yaml

@@ -33,14 +33,27 @@ runs:
     - name: Authenticate to Gitea registry
       shell: bash
       run: |
-        AUTH=$(printf "%s" "${{ inputs.registry_username }}:${{ inputs.registry_password }}" | base64 -w 0)
-        printf '{"auths":{"${{ inputs.registry_addr }}":{"auth":"%s"}}}' "$AUTH" > ${GITHUB_TEMP}/docker_config.json
+        Create a temporary file inside GITHUB_TEMP
+        DOCKER_CONFIG_FILE="${GITHUB_TEMP}/docker_config.json"
 
+        # Ensure cleanup ALWAYS happens
+        trap 'rm -f "$DOCKER_CONFIG_FILE"' EXIT
+
+        # Generate auth entry
+        AUTH=$(printf "%s" "${{ inputs.registry_username }}:${{ inputs.registry_password }}" | base64 -w 0)
+
+        printf '{"auths":{"%s":{"auth":"%s"}}}' \
+          "${{ inputs.registry_addr }}" \
+          "$AUTH" \
+          > "$DOCKER_CONFIG_FILE"
+
+        # Run BuildKit build
         buildctl \
-        --addr ${{ inputs.buildkit_addr }} \
-        build \
-        --frontend=dockerfile.v0 \
-        --local context=${{ inputs.context }} \
-        --local dockerfile=${{ inputs.dockerfile }} \
-        --opt filename=Dockerfile \
-        --output type=image,name=${{ inputs.tags }},push=true,registry.config=${GITHUB_TEMP}/docker_config.json
+          --addr ${{ inputs.buildkit_addr }} \
+          build \
+          --frontend=dockerfile.v0 \
+          --local context=${{ inputs.context }} \
+          --local dockerfile=${{ inputs.dockerfile }} \
+          --opt filename=Dockerfile \
+          --output type=image,name=${{ inputs.tags }},push=true,registry.config=$DOCKER_CONFIG_FILE
+