Skip to content

GHCR container package is private — cannot pull without authentication #220

@tzahari

Description

@tzahari

Problem

The container image ghcr.io/amitsaha/gitbackup cannot be pulled without authentication. All tags return 403 Forbidden:

$ podman pull ghcr.io/amitsaha/gitbackup:latest
Error: Requesting bearer token: received unexpected HTTP status: 403 Forbidden

Tested tags: latest, v1.1, 1.1, v1.0.4, v1.0.3, v1.0.2, v1.0.1, v1.0.0, v0.9.0, v0.8.4 — none are publicly accessible.

The package page at https://github.com/amitsaha/gitbackup/pkgs/container/gitbackup also returns a 404, which confirms the package is not publicly visible.

Root cause

GHCR defaults new packages to private visibility, even when the source repository is public. It looks like the package visibility was not changed to public after Docker publishing was added in #218.

Suggested fix

Go to GitHub → Packages → gitbackup → Package settings → Change visibility → Public.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions