Fx publish workflow

.github/workflows/publish.yml

@@ -1,4 +1,5 @@
-name: Publish
+---
+name: Publish to GHCR
 
 on:
   push:
@@ -8,30 +9,16 @@ on:
 
 jobs:
   publish:
+    name: Publish to GHCR
     runs-on: ubuntu-latest
 
-    steps:
-      - name: Create GitHub App Token
-        uses: actions/create-github-app-token@v1
-        id: github-app-token
-        with:
-          app-id: ${{ vars.APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+    permissions:
+      packages: write
+      contents: read
 
+    steps:
       - name: Checkout source
         uses: actions/checkout@v4
-        with:
-          token: ${{ steps.github-app-token.outputs.token }}
-          ref: ${{ github.head_ref }}
-          # Make sure the value of GITHUB_TOKEN will not be persisted in repo's config
-          persist-credentials: false
-
-      - name: Login to GHCR
-        uses: docker/login-action@v2
-        with:
-          registry: ghcr.io
-          username: ${{ github.repository_owner }}
-          password: ${{ steps.github-app-token.outputs.token }}
 
       - name: Setup Docker Buildx
         uses: docker/setup-buildx-action@v2
@@ -53,6 +40,13 @@ jobs:
             type=sha
             type=raw,value=latest,enable={{is_default_branch}}
 
+      - name: Login to GHCR
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: spartan-ductduong
+          password: ${{ secrets.PAT }}
+
       - name: Build & push
         uses: docker/build-push-action@v4
         with: