diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
index 0bc0faf..dec9eb4 100644
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@@ -23,13 +23,21 @@ jobs:
           docker buildx inspect --bootstrap
 
       - name: Login to Registry
+        env:
+          REGISTRY_HOSTPORT: ${{ secrets.REGISTRY_HOSTPORT }}
+          REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
+          REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
         run: |
-          docker login ${{ secrets.REGISTRY_HOSTPORT }} -u ${{ secrets.REGISTRY_USERNAME }} -p ${{ secrets.REGISTRY_PASSWORD }}
+          set -euo pipefail
+          test -n "$REGISTRY_HOSTPORT"
+          echo "$REGISTRY_PASSWORD" | docker login "$REGISTRY_HOSTPORT" -u "$REGISTRY_USERNAME" --password-stdin
 
       - name: Build and push
+        env:
+          REGISTRY_HOSTPORT: ${{ secrets.REGISTRY_HOSTPORT }}
         run: |
           docker buildx build --push \
             -f Dockerfile \
-            -t "${{ secrets.REGISTRY_HOSTPORT }}/nxtgauge-ai-assistant:${{ gitea.sha }}" \
-            -t "${{ secrets.REGISTRY_HOSTPORT }}/nxtgauge-ai-assistant:main-latest" \
+            -t "$REGISTRY_HOSTPORT/nxtgauge-ai-assistant:${{ gitea.sha }}" \
+            -t "$REGISTRY_HOSTPORT/nxtgauge-ai-assistant:main-latest" \
             .