build(ghcr.io): log in to ghcr.io before pushing containers

Signed-off-by: Clément Nussbaumer <[email protected]>

.github/workflows/publish.yaml

@@ -218,20 +218,21 @@ jobs:
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       - uses: ko-build/[email protected]
         name: Setup ko
+      - name: Run ko publish for docker.io
         env:
           KO_DOCKER_REPO: docker.io/postfinance
-      - name: Run ko publish
         run: |
           export REF=${{ github.ref}}
           export COMMIT=${{ github.sha}}
           export FEAT=$(echo $REF  | awk -F 'feat/' '{print $2}')
           ko publish ./cmd/kubelet-csr-approver/ --base-import-paths --platform=linux/amd64,linux/arm64,linux/arm -t $FEAT
 
-      - uses: ko-build/[email protected]
-        name: Setup ko
+      - name: Log in to ghcr.io registry
+        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u $ --password-stdin
+
+      - name: Run ko publish for ghcr.io/postfinance
         env:
           KO_DOCKER_REPO: ghcr.io/postfinance
-      - name: Run ko publish
         run: |
           export REF=${{ github.ref}}
           export COMMIT=${{ github.sha}}