mediago-dev--mediago
3f889da389
The Docker Hub mirror workflow used `secrets.DOCKERHUB_USERNAME != ''` directly inside step `if:` conditions and step-level `env:` expressions. GitHub's expression parser now rejects that with `Unrecognized named-value: 'secrets'` — the `secrets` context is only allowed in a narrow set of positions (mostly `with:` inputs and step `env:` values, not inside `if:` expressions). Route the check through a dedicated detection step whose `env:` reads the secrets (the one permitted way to surface them) and writes a plain boolean to step outputs. Every downstream conditional then guards on `steps.dockerhub.outputs.enabled == 'true'` instead. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>