I am looking for a recommendation how to do this.
From the docs:
You can use actions to call images from public registries only, such as an image that is publicly available on Docker Hub. Private registries are not supported.
How to store database credentials, api keys etc... when the Docker image must be publicly available on Docker Hub?