From 09878814ec7066a593c4e51fada17959e5ea1f1d Mon Sep 17 00:00:00 2001
From: Ein Anderssono <einand@3gdev.com>
Date: Fri, 16 Oct 2026 07:25:41 +0200
Subject: [PATCH] Require Harbor credentials before release publishing

---
 .gitea/workflows/publish.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.gitea/workflows/publish.yaml b/.gitea/workflows/publish.yaml
index 3e41770..82e3ee5 100644
--- a/.gitea/workflows/publish.yaml
+++ b/.gitea/workflows/publish.yaml
@@ -75,6 +75,7 @@ jobs:
           HARBOR_PASSWORD: ${{ secrets.HARBOR_PASSWORD }}
         run: |
           set -euo pipefail
+          test -n "$HARBOR_USERNAME" && test -n "$HARBOR_PASSWORD"
           printf '%s' "$HARBOR_PASSWORD" | docker login harbor.k3s.k0.nu --username "$HARBOR_USERNAME" --password-stdin
           unset HARBOR_PASSWORD
           version="$(cat VERSION)"
@@ -110,6 +111,7 @@ jobs:
         run: |
           set -euo pipefail
           version="$(cat VERSION)"
+          test -n "$HARBOR_USERNAME" && test -n "$HARBOR_PASSWORD"
           if [[ "$GITHUB_REF" == refs/tags/* ]]; then test "$GITHUB_REF_NAME" = "v$version"; else test "$AUTO_RELEASE_VERSION" = "$version"; fi
           python3 scripts/bump-version.py --check
           printf '%s' "$HARBOR_PASSWORD" | docker login harbor.k3s.k0.nu --username "$HARBOR_USERNAME" --password-stdin