github: authenticate earlier for Mac deployment

Authenticate earlier and unlock MacOS keychain so that the rest of the job can access dockerhub. Signed-off-by: Gerwin Klein <[email protected]>
seL4 · May 14, 2024 · 19ebe8c · 19ebe8c
1 parent a46d494
commit 19ebe8c
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/.github/workflows/docker-deploy.yml b/.github/workflows/docker-deploy.yml
@@ -87,6 +87,12 @@ jobs:
       TAG: ${{ needs.tag.outputs.tag }}
       SNAPSHOT_DATE: ${{ needs.tag.outputs.snapshot_date }}
     steps:
+    - name: Authenticate
+      if: ${{ github.repository_owner == 'seL4' }}
+      run: |
+        security unlock-keychain -p ${{secrets.M2_MINI_PWD}}
+        echo ${{secrets.DOCKER_TOKEN}} | docker login -u ${{secrets.DOCKER_USER}} --password-stdin
+
     - uses: actions/checkout@v4
     - name: "Build trustworthysystems/sel4"
       run: |
@@ -100,10 +106,6 @@ jobs:
        docker tag trustworthysystems/camkes-cakeml-rust:latest \
                   trustworthysystems/camkes-cakeml-rust:${TAG}-arm64
 
-    - name: Authenticate
-      if: ${{ github.repository_owner == 'seL4' }}
-      run: docker login -u ${{secrets.DOCKER_USER}} -p ${{secrets.DOCKER_TOKEN}}
-
     - name: "Push trustworthysystems/sel4"
       if: ${{ github.repository_owner == 'seL4' }}
       run: |