diff --git a/MODULE.bazel b/MODULE.bazel
index 5d4a2e49..e9de3633 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -13,6 +13,6 @@ bazel_dep(name = "platforms", version = "0.0.5")
 
 oci = use_extension("//oci:extensions.bzl", "oci")
 oci.toolchains(crane_version = "v0.14.0")
-use_repo(oci, "oci_crane_toolchains", "oci_crane_registry_toolchains", "oci_st_toolchains")
+use_repo(oci, "oci_crane_toolchains", "oci_crane_registry_toolchains", "oci_st_toolchains", "oci_auth_config")
 
 register_toolchains("@oci_crane_toolchains//:all", "@oci_crane_registry_toolchains//:all", "@oci_st_toolchains//:all")
diff --git a/oci/private/auth_config_locator.bzl b/oci/private/auth_config_locator.bzl
index 4452da89..6a045a37 100644
--- a/oci/private/auth_config_locator.bzl
+++ b/oci/private/auth_config_locator.bzl
@@ -41,7 +41,6 @@ def _get_auth_file_path(rctx):
 
 def _oci_auth_config_locator_impl(rctx):
     config_path = _get_auth_file_path(rctx)
-    config_path = None
     if not config_path:
         # rctx.execute is cached between bazel invocations. prefer it over print
         # to avoid spamming terminal. Also rctx.execute has a nicer output.