From b7ecc51f13adbf1d5687dd7864978c0f7f1dd366 Mon Sep 17 00:00:00 2001
From: Cloud User <ubuntu@dv2-kr3-ins-bastion-01.novalocal>
Date: Mon, 16 Mar 2026 11:00:44 +0900
Subject: [PATCH] fix: use single quotes for Harbor password to prevent shell
 expansion

---
 .gitea/workflows/ci.yaml | 11 ++++-------
 1 file changed, 4 insertions(+), 7 deletions(-)

diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
index 4defd9f..7ebbe20 100644
--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -6,10 +6,6 @@ on:
     tags: ['v*']
 
 env:
-  REGISTRY: ${{ secrets.REGISTRY_URL }}
-  REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
-  REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
-  IMAGE_NAME: ${{ secrets.REGISTRY_URL }}/infra/infra-report
   CHART_NAME: infra-report
 
 jobs:
@@ -27,10 +23,11 @@ jobs:
           else
             echo "TAG=sha-$(echo ${GITHUB_SHA} | cut -c1-7)" >> $GITHUB_ENV
           fi
+          echo "IMAGE_NAME=${{ secrets.REGISTRY_URL }}/infra/infra-report" >> $GITHUB_ENV
 
       - name: Login to Harbor
         run: |
-          echo "${{ env.REGISTRY_PASSWORD }}" | docker login ${{ env.REGISTRY }} -u ${{ env.REGISTRY_USER }} --password-stdin
+          echo '${{ secrets.REGISTRY_PASSWORD }}' | docker login ${{ secrets.REGISTRY_URL }} -u ${{ secrets.REGISTRY_USER }} --password-stdin
 
       - name: Build and push Docker image
         run: |
@@ -50,5 +47,5 @@ jobs:
 
       - name: Push Helm chart to Harbor (OCI)
         run: |
-          echo "${{ env.REGISTRY_PASSWORD }}" | helm registry login ${{ env.REGISTRY }} -u ${{ env.REGISTRY_USER }} --password-stdin
-          helm push ${CHART_NAME}-0.1.0.tgz oci://${{ env.REGISTRY }}/infra
+          echo '${{ secrets.REGISTRY_PASSWORD }}' | helm registry login ${{ secrets.REGISTRY_URL }} -u ${{ secrets.REGISTRY_USER }} --password-stdin
+          helm push ${CHART_NAME}-0.1.0.tgz oci://${{ secrets.REGISTRY_URL }}/infra