From f7c498d7adef42d9ff471e1ee2d3e542277cb1b2 Mon Sep 17 00:00:00 2001
From: tas <thomas.schick@mailbox.org>
Date: Mon, 16 Mar 2026 15:07:57 +0000
Subject: [PATCH] Update .gitea/workflows/deploy.yaml

---
 .gitea/workflows/deploy.yaml | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 2a95019..6a61f23 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -19,6 +19,14 @@ jobs:
           git config --global http.https://git.kimchi.sslVerify false
           git clone --depth 1 https://${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_PASSWORD }}@git.kimchi/tas/major_tom.git .
 
+      - name: Debug registry auth
+        run: |
+          curl -s -D- http://git.kimchi/v2/ | head -15
+          TOKEN=$(curl -s "http://git.kimchi/v2/token?service=container_registry&scope=repository:tas/major_tom:push,pull" -u "${{
+          secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_PASSWORD }}" | jq -r .token)
+          echo "Token received: ${TOKEN:0:20}..."
+          curl -s -D- -H "Authorization: Bearer $TOKEN" http://git.kimchi/v2/tas/major_tom/tags/list | head -15
+
       - name: Build and push container image
         run: |
           set -ex
@@ -30,10 +38,6 @@ jobs:
 
           CREDS="${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_PASSWORD }}"
 
-          echo "=== debug: Www-Authenticate header ==="
-          curl -sk -I http://git.kimchi/v2/ | grep -i www-authenticate || true
-          echo ""
-
           echo "=== buildah push tag ==="
           buildah push --tls-verify=false --creds "$CREDS" "$IMAGE_TAG"