← Back to context

Comment by lstamour

6 years ago

Publishing containers to GitHub might be free but you have to login to GitHub to download the containers from free accounts, significantly hampering end-user usability compared to Docker Hub, particularly if 2FA authentication is enabled on a GitHub account. As mentioned elsewhere Quay.io might be another alternative.

You don't need to register an SSH key to download a public repo I thought

  • Not an SSH key, but you do need an access token:

    > You need an access token to publish, install, and delete packages in GitHub Packages.

    https://docs.github.com/en/packages/using-github-packages-wi...

    • ...but not to download. You can clone a repo and download release artifacts without a PAT. That's only necessary for interacting with the API for actions that need authentication, which would be anything involving mutating a repository.

      3 replies →

    • GitHub access tokens are a bit of a nightmare since you can't limit the permissions for a token. Only workaround I've found is to create another GitHub user for an access token and restrict that user's access.