From 997bbf055b45073ef2a95e8bfbbe9bef19127b2e Mon Sep 17 00:00:00 2001
From: 3metaJun <251347867+3metaJun@users.noreply.github.com>
Date: Fri, 28 Aug 2026 02:47:37 +0800
Subject: [PATCH] fix: authenticate metaproxy image publishing

---
 .github/workflows/metaproxy-image.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/metaproxy-image.yml b/.github/workflows/metaproxy-image.yml
index 411a35a147ff..2d37eaecf765 100644
--- a/.github/workflows/metaproxy-image.yml
+++ b/.github/workflows/metaproxy-image.yml
@@ -29,8 +29,11 @@ jobs:
       - uses: docker/login-action@v3
         with:
           registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          # This user-scoped package predates the fork and is not repository-
+          # linked, so GITHUB_TOKEN cannot read its existing layers. Keep the
+          # package-scoped publisher credential in the repository secret.
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GHCR_TOKEN }}
 
       - name: Build and push
         uses: docker/build-push-action@v6