From 6e6844ce24925f913406f0f6923042cb740beed4 Mon Sep 17 00:00:00 2001
From: "Marcus A." <marcus@thelab.internal>
Date: Tue, 7 Apr 2026 23:28:33 +0000
Subject: [PATCH] CI: enforce lowercase image name using
 toLower(gitea.repository)

---
 .gitea/workflows/ci.yml | 19 ++++++++++++-------
 1 file changed, 12 insertions(+), 7 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 4858ad6..bed7976 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -23,10 +23,15 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
+      - name: Set image name (lowercase)
+        id: meta
+        run: |
+          echo "image=${{ secrets.DOCKER_REGISTRY }}/${{ toLower(gitea.repository) }}" >> $GITHUB_OUTPUT
+
       - name: Log in to Gitea Container Registry
         uses: docker/login-action@v3
         with:
-          registry: ${{ secrets.DOCKER_REGISTRY }}
+          registry: ${{ steps.meta.outputs.image }}
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
@@ -37,14 +42,14 @@ jobs:
           context: .
           push: ${{ github.event_name != 'pull_request' }}
           tags: |
-            ${{ secrets.DOCKER_REGISTRY }}/TheLab/sandbox-base-image:${{ github.sha }}
-            ${{ secrets.DOCKER_REGISTRY }}/TheLab/sandbox-base-image:latest
-          cache-from: type=registry,ref=${{ secrets.DOCKER_REGISTRY }}/TheLab/sandbox-base-image:latest
-          cache-to: type=registry,ref=${{ secrets.DOCKER_REGISTRY }}/TheLab/sandbox-base-image:latest,mode=max
+            ${{ steps.meta.outputs.image }}:${{ github.sha }}
+            ${{ steps.meta.outputs.image }}:latest
+          cache-from: type=registry,ref=${{ steps.meta.outputs.image }}:latest
+          cache-to: type=registry,ref=${{ steps.meta.outputs.image }}:latest,mode=max
           platforms: linux/amd64,linux/arm64
 
       - name: Tag and push stable (main only)
         if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
         run: |
-          docker tag ${{ secrets.DOCKER_REGISTRY }}/TheLab/sandbox-base-image:${{ github.sha }} ${{ secrets.DOCKER_REGISTRY }}/TheLab/sandbox-base-image:stable
-          docker push ${{ secrets.DOCKER_REGISTRY }}/TheLab/sandbox-base-image:stable
+          docker tag ${{ steps.meta.outputs.image }}:${{ github.sha }} ${{ steps.meta.outputs.image }}:stable
+          docker push ${{ steps.meta.outputs.image }}:stable