diff --git a/.forgejo/workflows/docker-build.yml b/.forgejo/workflows/docker-build.yml
index e489608..bd5197b 100644
--- a/.forgejo/workflows/docker-build.yml
+++ b/.forgejo/workflows/docker-build.yml
@@ -31,8 +31,10 @@ jobs:
           git fetch --depth 1 origin "${{ github.ref_name }}"
           git checkout -q -f FETCH_HEAD
 
+      # Uses a Forgejo token with write:package scope (the auto GITHUB_TOKEN
+      # can't write packages — push fails with 'unauthorized: reqPackageAccess')
       - name: Log in to Forgejo container registry
-        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login git.plexultra.com -u "${{ github.actor }}" --password-stdin
+        run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login git.plexultra.com -u "${{ github.actor }}" --password-stdin
 
       - name: Build and push API image
         run: |