Experiment in using GitHub CLI to authenticate fetching docker images from GitHub Package Registry

config.json

// ~/docker/config.json
{
	"credsStore": "desktop",
	"credHelpers": {
		"docker.pkg.github.com": "gh",
		"ghcr.io": "gh"
	}
}

docker-credential-gh

#!/bin/bash
# This "docker-credential-gh" utility should exist an as executable somewhere in PATH.
#
# Dependencies: gh
#
set -e

cmd="$1"
if [ "erase" = "$cmd" ]; then
  cat - >/dev/null
  exit 0
fi
if [ "store" = "$cmd" ]; then
  cat - >/dev/null
  exit 0
fi
if [ "get" != "$cmd" ]; then
  exit 1
fi

host="$(cat -)"
host="${host#https://}"
host="${host%/}"
if [ "$host" != "ghcr.io" ] && [ "$host" != "docker.pkg.github.com" ]; then
  exit 1
fi

token="$(gh config get -h github.com oauth_token)"
if [ -z "$token" ]; then
  exit 1
fi

printf '{"Username":"%s", "Secret":"%s"}\n' "$(gh config get -h github.com user)" "$token"

Thanks for making this possible! I was able to login in my environment,

$ docker login ghcr.io
Authenticating with existing credentials...
Login Succeeded

However, it seemed to be ~/.docker/config.json , not ~/docker/config.json , that was overriding the settings.
I hope this is helpful to those who came to see it.

Should be:

printf '{"Username":"%s", "Secret":"%s"}\n' "$(gh api user -q '.login')" "$token"

on the last line