name: Docker Login
description: Log in to the OCI registry without exposing the password in process arguments
inputs:
  registry:
    description: OCI registry hostname
    required: false
    default: oci.reg.darano.ir
  username:
    description: OCI registry username
    required: false
    default: admin
  password:
    description: OCI registry password
    required: true
runs:
  using: composite
  steps:
    - name: Log in
      shell: bash
      env:
        REGISTRY: ${{ inputs.registry }}
        REGISTRY_USERNAME: ${{ inputs.username }}
        REGISTRY_PASSWORD: ${{ inputs.password }}
      run: |
        set -euo pipefail
        printf '%s' "$REGISTRY_PASSWORD" |
          docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin