From 35bb8f96ae1d8d21de0616a3927583aa9e4560c6 Mon Sep 17 00:00:00 2001
From: Edoardo Rosa <6991986+notdodo@users.noreply.github.com>
Date: Fri, 3 Apr 2026 10:30:28 +0200
Subject: [PATCH 1/2] fix: env

---
 .github/workflows/release.yml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d144686..080bc39 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,6 +30,7 @@ jobs:
       security-events: write
     uses: notdodo/github-actions/.github/workflows/docker-build-and-push.yml@docker-build-and-push-v0
     with:
+      environment: main
       registry: docker.io
       image: digintlab/opencti-connector
       platforms: linux/amd64,linux/arm64
@@ -43,13 +44,12 @@ jobs:
         pypi.org:443
       push: true
       sign-image: false
-    secrets:
-      registry-username: ${{ secrets.DOCKERHUB_USERNAME }}
-      registry-password: ${{ secrets.DOCKERHUB_TOKEN }}
+    secrets: inherit
 
   update-docker-readme:
     needs: [build-docker-image]
     runs-on: ubuntu-latest
+    environment: main
     permissions:
       id-token: write
       contents: read
@@ -68,6 +68,7 @@ jobs:
   sign-image:
     needs: [build-docker-image]
     runs-on: ubuntu-latest
+    environment: main
     permissions:
       id-token: write
       contents: read

From 0c16170749aca27b2f5921fe6f93c8106a93446e Mon Sep 17 00:00:00 2001
From: Edoardo Rosa <6991986+notdodo@users.noreply.github.com>
Date: Fri, 3 Apr 2026 10:38:10 +0200
Subject: [PATCH 2/2] fix

---
 .github/workflows/release.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 080bc39..7a059f7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -44,7 +44,9 @@ jobs:
         pypi.org:443
       push: true
       sign-image: false
-    secrets: inherit
+    secrets:
+      registry-username: ${{ secrets.DOCKERHUB_USERNAME }}
+      registry-password: ${{ secrets.DOCKERHUB_TOKEN }}
 
   update-docker-readme:
     needs: [build-docker-image]