Skip to content

Docker

How do I authenticate to a private registry?

Quick answer

Use docker/login-action with a token, or OIDC for cloud registries.

The detail that matters

OIDC is better — there is no long-lived credential to leak, because it does not exist until the job requests one.

Your next build could be twice as fast, at half the price

Start free. Migrating away is the same one line, and we publish that diff too.