From bfbf5d5a19fecb44b51c97845ecb04dad604f1a8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Gerg=C5=91=20Magyar?= <gergomagyar@icloud.com>
Date: Thu, 23 Apr 2026 21:56:05 +0100
Subject: [PATCH] fix(ci): inherit secrets into reusable docker.yml from
 release-candidate (#1054)

---
 .github/workflows/release-candidate.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/release-candidate.yml b/.github/workflows/release-candidate.yml
index 548d52e130..7413a02e14 100644
--- a/.github/workflows/release-candidate.yml
+++ b/.github/workflows/release-candidate.yml
@@ -379,6 +379,10 @@ jobs:
     needs: [guard, publish]
     if: needs.guard.outputs.should_run == 'true' && needs.publish.outputs.vtag != ''
     uses: ./.github/workflows/docker.yml
+    # Reusable workflows do not receive caller secrets unless inherited; without
+    # this, DOCKERHUB_* / GITHUB_TOKEN are empty in docker.yml → "Username and
+    # password required" on Docker Hub login (see same pattern on `ci:` above).
+    secrets: inherit
     permissions:
       contents: read
       packages: write