diff --git a/.forgejo/workflows/deploy.yml b/.forgejo/workflows/deploy.yml
index 1874715..f50aeeb 100644
--- a/.forgejo/workflows/deploy.yml
+++ b/.forgejo/workflows/deploy.yml
@@ -42,7 +42,11 @@ jobs:
           git checkout -q FETCH_HEAD
 
       - name: Registry login
-        run: printf '%s\n' "${{ secrets.REGISTRY_TOKEN }}" | docker login "$REGISTRY_HOST" -u "$REGISTRY_OWNER" --password-stdin
+        env:
+          REGISTRY_TOKEN: ${{ secrets.REGISTRY_TOKEN }}
+        run: |
+          [ -n "$REGISTRY_TOKEN" ] || { echo "REGISTRY_TOKEN secret is empty"; exit 1; }
+          docker login "$REGISTRY_HOST" -u "$REGISTRY_OWNER" -p "$REGISTRY_TOKEN"
 
       - name: Build & push images (SHA tag)
         run: |