From 93b7d44f88b336f5a401451d738edbc77a7fb06e Mon Sep 17 00:00:00 2001
From: Andy Chosak <andy.chosak@cfpb.gov>
Date: Wed, 1 Apr 2026 08:48:37 -0400
Subject: [PATCH] Fix: Explicitly pass GitHub token for GHCR auth

Composite actions can't access secrets from the calling action, so we
need to explicitly pass the GitHub token for GHCR auth.
---
 .github/workflows/docker.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 72a02d8..1e2320d 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -16,6 +16,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
-      - uses: cfpb/actions/docker-build-push@f584bc1041a1c0590d35533f4f3478ad1229f210
+      - uses: cfpb/actions/docker-build-push@1be1a44a38e05b7092c844511a0d214e93b43c21
         with:
           image-name: s3-proxy
+          token: ${{ secrets.GITHUB_TOKEN }}