A job must run steps inside a private image registry.example.com/ci/python:3.12. How do you supply registry credentials for the job container?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Job containers support credentials: for private registries alongside image:. runs-on still selects the host VM; services are sidecars; query-string passwords are not a thing.
Full explanation below image
Full Explanation
When steps run inside a private container image, configure container.image and, for authenticated registries, container.credentials mapping username and password (typically from secrets). runs-on still picks the runner that hosts the container engine—you do not put the image name in runs-on. services: can also use images (and credentials in modern configs) but that does not replace the job container when you want all steps inside your CI image. Never embed passwords in image URLs. Prefer least-privilege pull tokens, short-lived credentials, and image digests for supply-chain integrity.