harald/zeroclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 3

fix(ci): verify anonymous GHCR pull even when visibility API is unavailable (#801)

Browse source
This commit is contained in:
Will Sarg 2026-02-18 07:34:25 -05:00 • committed by GitHub
parent 50fd5b81e1
commit 80b60d7b70
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 17 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

34
.github/workflows/pub-docker-img.yml vendored
View file

@ -139,32 +139,32 @@ jobs:
owner="${GITHUB_REPOSITORY_OWNER,,}"
repo="${GITHUB_REPOSITORY#*/}"
# Package path can be either "<repo>" or URL-encoded "<owner>/<repo>".
# Package path can vary depending on repository/package linkage.
candidates=(
"$repo"
"${owner}%2F${repo}"
)
for pkg in "${candidates[@]}"; do
code="$(curl -sS -o /tmp/ghcr-visibility.json -w "%{http_code}" \
-X PATCH \
-H "Authorization: Bearer ${GH_TOKEN}" \
-H "Accept: application/vnd.github+json" \
-H "X-GitHub-Api-Version: 2022-11-28" \
"https://api.github.com/orgs/${owner}/packages/container/${pkg}/visibility" \
-d '{"visibility":"public"}' || true)"
for scope in orgs users; do
for pkg in "${candidates[@]}"; do
code="$(curl -sS -o /tmp/ghcr-visibility.json -w "%{http_code}" \
-X PATCH \
-H "Authorization: Bearer ${GH_TOKEN}" \
-H "Accept: application/vnd.github+json" \
-H "X-GitHub-Api-Version: 2022-11-28" \
"https://api.github.com/${scope}/${owner}/packages/container/${pkg}/visibility" \
-d '{"visibility":"public"}' || true)"
if [ "$code" = "200" ] || [ "$code" = "204" ]; then
echo "GHCR package visibility is public for ${pkg}."
exit 0
fi
if [ "$code" = "200" ] || [ "$code" = "204" ]; then
echo "GHCR package visibility is public (${scope}/${owner}/${pkg})."
exit 0
fi
echo "Attempt for ${pkg} returned HTTP ${code}."
cat /tmp/ghcr-visibility.json || true
echo "Visibility attempt ${scope}/${owner}/${pkg} returned HTTP ${code}."
done
done
echo "::error::Failed to set GHCR package visibility to public."
exit 1
echo "::warning::Unable to update GHCR visibility via API in this run; proceeding to direct anonymous pull verification."
- name: Verify anonymous GHCR pull access
shell: bash