From 9275be7aa42f85ba74e9ab68631c844a967612d8 Mon Sep 17 00:00:00 2001
From: subochev <caffeine.mgn@gmail.com>
Date: Mon, 31 Aug 2026 14:50:25 +0300
Subject: [PATCH] scan-backend: login to nexus.isb before building image (base
 pull requires auth)

---
 .gitea/workflows/scan-backend.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.gitea/workflows/scan-backend.yml b/.gitea/workflows/scan-backend.yml
index 4e6ac77..6ac62f1 100644
--- a/.gitea/workflows/scan-backend.yml
+++ b/.gitea/workflows/scan-backend.yml
@@ -54,6 +54,9 @@ jobs:
 
           ENTRYPOINT ["java", "-jar", "/app.jar"]
           EOF
+      - name: Login to Nexus
+        run: |
+          echo '${{ secrets.NEXUS_PASSWORD }}' | buildah login --tls-verify=false -u '${{ secrets.NEXUS_USERNAME }}' --password-stdin nexus.isb
       - name: Build Image
         uses: redhat-actions/buildah-build@v2
         env: