try to set up a temporary keychain...

.gitlab-ci.yml

 .template-macos:
-  image: ghcr.io/cirruslabs/macos-sonoma-base:latest
+  #image: ghcr.io/cirruslabs/macos-sequoia-base:latest
   tags:
     - cgg
     - macos
@@ -13,7 +13,9 @@
 
   script:
     - TAG_PREFIX="${TAG_PREFIX}${MACOS_RELEASE}-"
-    - tart --version
+    - security create-keychain -p insecure insecure
+    - security default-keychain -s insecure
+    - security unlock-keychain -p insecure insecure
     - echo -n "${CI_JOB_TOKEN}" | tart login "${CI_REGISTRY}" --username gitlab-ci-token --password-stdin
 #    - tart clone 
 #    - TAG="${CI_REGISTRY_IMAGE}:${TAG_PREFIX}${CI_COMMIT_SHA}"
@@ -36,6 +38,8 @@
   after_script:
     # Workaround for https://gitlab.com/gitlab-org/gitlab-foss/-/issues/40925
     - tart logout "${CI_REGISTRY}"
+    - security default-keychain -s "${HOME}/Library/Keychains/login.keychain-db"
+    - security delete-keychain insecure
 
 
 sonoma: