add credentials, but then why do I need to log in????

.forgejo/workflows/runner-image.yml

@@ -30,11 +30,18 @@ jobs:
           mkdir -p ~/.config/containers
           echo '{ "default": [ {"type":"insecureAcceptAnything"} ] }' > ~/.config/containers/policy.json
 
-      - name: Build image
-        run: nix-build modules/nixos/services/development/forgejo/runners/default.nix
-
-      - name: Push image
+      - name: Log into registry
         run: |
           podman login --username "${{ forge.actor }}" --password "${{ forge.token }}" ${{ env.registry }}
+
+      - name: Create image
+        run: |
+          nix-build modules/nixos/services/development/forgejo/runners/default.nix
           podman load < result
-          podman push localhost/default:latest ${{ env.registry }}/${{ env.owner }}/${{ env.image }}:${{ env.tag }}
+
+      - name: Push image
+        run: >-
+          podman push
+          --creds="${{ forge.actor }}:${{ forge.token }}"
+          localhost/default:latest
+          ${{ env.registry }}/${{ env.owner }}/${{ env.image }}:${{ env.tag }}