From 4f40574119df36044a246854b56893e8c9bcac14 Mon Sep 17 00:00:00 2001
From: Tibo De Peuter <tibo.depeuter@ugent.be>
Date: Tue, 18 Aug 2026 18:38:34 +0200
Subject: [PATCH] ci(forgejo): configure act-runner container image, registry
 host, and package permissions

---
 .forgejo/workflows/build-push.yml | 25 +++++++++++++++++++++++--
 1 file changed, 23 insertions(+), 2 deletions(-)

diff --git a/.forgejo/workflows/build-push.yml b/.forgejo/workflows/build-push.yml
index 3ee1c48..f072dc4 100644
--- a/.forgejo/workflows/build-push.yml
+++ b/.forgejo/workflows/build-push.yml
@@ -9,20 +9,37 @@ on:
     tags:
       - 'v*'
 
+# Grant permissions to push packages to Forgejo Container Registry and create releases
+permissions:
+  contents: write
+  packages: write
+
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
+    container:
+      image: catthehacker/ubuntu:act-latest
+    permissions:
+      contents: write
+      packages: write
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4
 
+      - name: Extract Registry Host
+        id: reg
+        run: |
+          # Strip protocol scheme (http:// or https://) for Docker registry reference
+          SERVER_HOST=$(echo "${{ gitea.server_url }}" | sed -e 's|^https\?://||')
+          echo "host=${SERVER_HOST}" >> "$GITHUB_OUTPUT"
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
       - name: Log in to Forgejo Container Registry
         uses: docker/login-action@v3
         with:
-          registry: ${{ gitea.server_url }}
+          registry: ${{ steps.reg.outputs.host }}
           username: ${{ gitea.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
@@ -30,7 +47,7 @@ jobs:
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: ${{ gitea.server_url }}/${{ gitea.repository }}
+          images: ${{ steps.reg.outputs.host }}/${{ gitea.repository }}
           tags: |
             type=raw,value=latest,enable=${{ gitea.ref == 'refs/heads/main' || gitea.ref == 'refs/heads/master' }}
             type=ref,event=branch
@@ -51,6 +68,10 @@ jobs:
     needs: build-and-push
     if: (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master') || startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
+    container:
+      image: catthehacker/ubuntu:act-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4