From a414772e5cb02cc932a0c42af91bdb295a213ea2 Mon Sep 17 00:00:00 2001
From: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Date: Wed, 5 Aug 2026 18:00:36 +0200
Subject: [PATCH] ci: use PAT auth for Scout Docker Hub login

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
---
 .github/workflows/build.yml | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e2b1c1c3986b..017385496b55 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -416,17 +416,16 @@ jobs:
     permissions:
       contents: read # same as global permission
       security-events: write # required to write sarif report
-      id-token: write # for logging in to Docker Hub with GitHub OIDC
     needs:
       - bin-image
     steps:
       -
+        # FIXME: switch to OIDC once Scout supports it
         name: Login to DockerHub
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
-        env:
-          DOCKERHUB_OIDC_CONNECTIONID: ${{ vars.DOCKERHUB_OIDC_CONNECTIONID }}
         with:
-          username: docker
+          username: ${{ vars.DOCKERPUBLICBOT_USERNAME }}
+          password: ${{ secrets.DOCKERPUBLICBOT_READ_PAT }}
       -
         name: Scout
         id: scout