From 60427a1a25e5d7923cb534f72ae1a4405aebf018 Mon Sep 17 00:00:00 2001
From: Marko Bevc <marko@kosli.com>
Date: Thu, 5 Mar 2026 17:52:15 +0000
Subject: [PATCH] fix: add missing registry credentials

Add registry credentials to Kosli assert command
---
 lab-04-release-controls.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/lab-04-release-controls.md b/lab-04-release-controls.md
index 7766c24..9a3a122 100644
--- a/lab-04-release-controls.md
+++ b/lab-04-release-controls.md
@@ -100,7 +100,9 @@ In `.github/workflows/full-pipeline.yaml`, find the `Deploy` job. Add the assert
         IMAGE_NAME="ghcr.io/${IMAGE}:latest"
         kosli assert artifact ${IMAGE_NAME} \
           --artifact-type oci \
-          --flow ${APP_NAME}-pipeline
+          --flow ${APP_NAME}-pipeline \
+          --registry-username ${{ github.actor }} \
+          --registry-password ${{ secrets.GITHUB_TOKEN }}
 ```
 
 This command asks Kosli: *"Is this artifact (and its trail) compliant?"*