apache/arrow uses Docker Hub not ghcr.io and Docker Hub user account is here: https://github.com/apache/arrow/blob/a974df4f2f11cf404c88df083d74a71aa463cfb9/.github/workflows/cpp.yml#L154-L155

Alternatively we might need to ask infra to enable the package permissions for this repo? But I feel like that defaults to enabled.

github.actor afaik would be kou (for this PR) but the required login would be apache which you can get through github.repository_owner

Hmm. Auto-generated GitHub Token may be for github.actor not github.repository.

FYI: ADBC uses github.actor and it works:

https://github.com/apache/arrow-adbc/blob/24950853d2398fd75601656fbf2bc2ddeff7d87c/.github/workflows/packaging.yml#L360-L365

https://github.com/apache/arrow-adbc/actions/runs/15668872626/job/44136690901#step:8:1

Run docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772
  with:
    registry: ghcr.io
    username: lidavidm
    password: ***
    ecr: auto
    logout: true

Alternatively we might need to ask infra to enable the package permissions for this repo? But I feel like that defaults to enabled.

apache/arrow-java#476 may be related but let's try with this. If we can't push, let's ask INFRA.

Ah, ok! Then it's probably just the missing scope :)

Worked: https://github.com/apache/arrow-swift/actions/runs/15693333885/job/44213242144#step:9:849

 Pushing ghcr.io/apache/arrow-swift-dev:amd64-ubuntu-noble: c8ed27d1ec99 Pushed 

https://github.com/apache/arrow-swift/pkgs/container/arrow-swift-dev is public. It must be available from forks.