From 1a7a4bb0f856c33f19cb92019b37d18e941bba77 Mon Sep 17 00:00:00 2001 From: Elmar Kresse Date: Thu, 4 Sep 2025 17:23:24 +0200 Subject: [PATCH] refactor: sanitize GITEA_REGISTRY_VAR input by stripping protocol and path --- .gitea/workflows/docker-build-push.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/docker-build-push.yml b/.gitea/workflows/docker-build-push.yml index 3cee162..371a952 100644 --- a/.gitea/workflows/docker-build-push.yml +++ b/.gitea/workflows/docker-build-push.yml @@ -71,7 +71,8 @@ jobs: # Prefer explicit var GITEA_REGISTRY; else, use the same host as server URL if [ -n "${GITEA_REGISTRY_VAR:-}" ]; then - REGISTRY="$GITEA_REGISTRY_VAR" + # Strip protocol and any path if mistakenly provided + REGISTRY=$(echo "$GITEA_REGISTRY_VAR" | sed -E 's#^https?://##; s#/.*$##; s#/$##') else # GITHUB_SERVER_URL like https://gitea.example.com REGISTRY=$(echo "$GITHUB_SERVER_URL" | sed -E 's#^https?://##; s#/$##')