Currently with the docker workflow plugin you have to specify credentials, however in our case we're using the AWS's container registry which don't have fixed credentials. Instead, you can use an AWS api call to retrieve temporary credentials (valid 12 hours).

Ideally, a three-parameter withRegistry (registry, username, password) would allow us to log in with these kinds of credentials.