From f49eb89ee4cad78ba9c146e7ca8d47fcdd3f6a8b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Gr=C3=A9goire=20Mureau?= <gregoire.mureau+pro@etik.com>
Date: Wed, 9 Sep 2026 18:29:34 +0200
Subject: [PATCH] Pousser l'image P7 avec un PAT write:package (secret
 PACKAGE_TOKEN).
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Le GITHUB_TOKEN du job se logue au registry mais le push est refusé (reqPackageAccess).
---
 .github/workflows/cd.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 1ddc340..6af6cfe 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -43,7 +43,8 @@ jobs:
         run: |
           set -eu
           REGISTRY="${GITHUB_SERVER_URL#https://}"
-          echo "${{ secrets.GITHUB_TOKEN }}" | docker login "${REGISTRY}" -u "${GITHUB_ACTOR}" --password-stdin
+          # GITHUB_TOKEN : login OK mais push → unauthorized: reqPackageAccess
+          echo "${{ secrets.PACKAGE_TOKEN }}" | docker login "${REGISTRY}" -u "${GITHUB_ACTOR}" --password-stdin
 
       - name: Build and push
         run: |