fix: another attempt to fix the secret file path

Author: alfetopito

.github/workflows/docker.yml

@@ -34,8 +34,14 @@ jobs:
 
       - name: Check for .npmrc
         run: |
+          pwd
+          echo "---"
+          ls -la | grep -E "^\\.|npmrc" || echo "No .npmrc found"
+          echo "---"
+          pwd_val=$PWD
           if [ -f .npmrc ]; then
             echo "HAS_NPMRC=true" >> $GITHUB_ENV
+            echo "Full path: ${pwd_val}/.npmrc"
             echo "Using .npmrc:" && ls -l .npmrc && echo "---" && sed 's/_authToken=.*/_authToken=***REDACTED***/' .npmrc
           else
             echo "HAS_NPMRC=false" >> $GITHUB_ENV
@@ -63,7 +69,7 @@ jobs:
 
       - name: 'BFF: Build and push ${{ env.PACKAGE_NAME }} (with .npmrc)'
         if: ${{ env.HAS_NPMRC == 'true' }}
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           file: ${{ matrix.package }}/Dockerfile
@@ -72,12 +78,14 @@ jobs:
           labels: ${{ steps.image_meta.outputs.labels }}
           builder: ${{ steps.setup-buildx.outputs.name }}
           platforms: linux/amd64
+          cache-from: type=gha  
+          cache-to: type=gha,mode=max  
           secret-files: |
-            id=npmrc,src=${{ github.workspace }}/.npmrc
+            id=npmrc,src=.npmrc
 
       - name: 'BFF: Build and push ${{ env.PACKAGE_NAME }} (no .npmrc)'
         if: ${{ env.HAS_NPMRC != 'true' }}
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           file: ${{ matrix.package }}/Dockerfile

apps/api/Dockerfile

@@ -22,6 +22,13 @@ RUN chown -R api:api .
 # You can remove this install step if you build with `--bundle` option.
 # The bundled output will include external dependencies.
 RUN --mount=type=secret,id=npmrc,target=/root/.npmrc,required=false \
-  sh -eu -c 'ls -l /root/.npmrc || echo "/root/.npmrc not present"; yarn --cwd api --omit=dev -f install'
+  sh -eu -c '
+    if [ -f /root/.npmrc ]; then
+      echo "Using .npmrc:" && cat /root/.npmrc | sed "s/_authToken=.*/_authToken=***REDACTED***/"
+    else
+      echo ".npmrc not present - building without GitHub Packages auth"
+    fi
+    yarn --cwd api --omit=dev -f install
+  '
 
 CMD [ "node", "api" ]

apps/notification-producer/Dockerfile

@@ -21,6 +21,13 @@ RUN chown -R notification-producer:notification-producer .
 # You can remove this install step if you build with `--bundle` option.
 # The bundled output will include external dependencies.
 RUN --mount=type=secret,id=npmrc,target=/root/.npmrc,required=false \
-  sh -eu -c 'ls -l /root/.npmrc || echo "/root/.npmrc not present"; yarn --cwd notification-producer install --production --force'
+  sh -eu -c '
+    if [ -f /root/.npmrc ]; then
+      echo "Using .npmrc:" && cat /root/.npmrc | sed "s/_authToken=.*/_authToken=***REDACTED***/"
+    else
+      echo ".npmrc not present - building without GitHub Packages auth"
+    fi
+    yarn --cwd notification-producer install --production --force
+  '
 
 CMD [ "node", "notification-producer" ]

apps/telegram/Dockerfile

@@ -21,6 +21,13 @@ RUN chown -R telegram:telegram .
 # You can remove this install step if you build with `--bundle` option.
 # The bundled output will include external dependencies.
 RUN --mount=type=secret,id=npmrc,target=/root/.npmrc,required=false \
-  sh -eu -c 'ls -l /root/.npmrc || echo "/root/.npmrc not present"; yarn --cwd telegram install --production --force'
+  sh -eu -c '
+    if [ -f /root/.npmrc ]; then
+      echo "Using .npmrc:" && cat /root/.npmrc | sed "s/_authToken=.*/_authToken=***REDACTED***/"
+    else
+      echo ".npmrc not present - building without GitHub Packages auth"
+    fi
+    yarn --cwd telegram install --production --force
+  '
 
 CMD [ "node", "telegram" ]

apps/twap/Dockerfile

@@ -21,6 +21,13 @@ RUN chown -R twap:twap .
 # You can remove this install step if you build with `--bundle` option.
 # The bundled output will include external dependencies.
 RUN --mount=type=secret,id=npmrc,target=/root/.npmrc,required=false \
-  sh -eu -c 'ls -l /root/.npmrc || echo "/root/.npmrc not present"; yarn --cwd twap --omit=dev -f install'
+  sh -eu -c '
+    if [ -f /root/.npmrc ]; then
+      echo "Using .npmrc:" && cat /root/.npmrc | sed "s/_authToken=.*/_authToken=***REDACTED***/"
+    else
+      echo ".npmrc not present - building without GitHub Packages auth"
+    fi
+    yarn --cwd twap --omit=dev -f install
+  '
 
 CMD [ "node", "twap" ]