diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 46f479a8..a1fda9ab 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -188,6 +188,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
+          scopes: repository:rustfs/rustfs:pull,push
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3
diff --git a/.gitignore b/.gitignore
index 4dab0f51..dbf4271a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -19,3 +19,4 @@ deploy/certs/*
 profile.json
 .docker/openobserve-otel/data
 *.zst
+.secrets