From f3277b54073c9ce53ea4e7f8b40f5b4f2224904f Mon Sep 17 00:00:00 2001
From: Marc Lasserre <marc.lasserre@gorym.fr>
Date: Wed, 26 Aug 2026 13:19:12 +0200
Subject: [PATCH] =?UTF-8?q?ci(giteastry):=20passage=20au=20build=20herm?=
 =?UTF-8?q?=C3=A9tique=20dind=20et=20image=20giteastry?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/ci.yml | 14 +++++++-------
 Dockerfile              |  8 ++++----
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 495fb08..3dbfda5 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -7,19 +7,19 @@ on:
 jobs:
   build-and-push-runner:
     name: Build & Publish Runner Image to Giteastry
-    runs-on: host
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
 
-      - name: Login to Giteastry
+      - name: Authentification Giteastry
         run: |
-          echo "${{ secrets.GITEA_TOKEN }}" | podman login container.rym.local -u ${{ gitea.actor }} --password-stdin
+          echo "${{ secrets.GITEA_TOKEN }}" | docker login container.rym.local -u ${{ gitea.actor }} --password-stdin
 
-      - name: Build Runner Image
+      - name: Build Image Runner
         run: |
-          podman build -t container.rym.local/rym/devsecops-runner:latest .
+          docker build -t container.rym.local/rym/devsecops-runner:latest .
 
-      - name: Push to Giteastry
+      - name: Push vers Giteastry
         run: |
-          podman push container.rym.local/rym/devsecops-runner:latest
+          docker push container.rym.local/rym/devsecops-runner:latest
diff --git a/Dockerfile b/Dockerfile
index 35259d0..dc47349 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,7 @@
-FROM docker.io/alpine:3.19
+# SOURCE INTERNE STRICTE (Giteastry)
+FROM container.rym.local/mirror/alpine:3.19
 
-# Dépendances de base et sécurité
+# Outillage pré-installé dans le runner central
 RUN apk add --no-cache \
     bash \
     curl \
@@ -9,8 +10,7 @@ RUN apk add --no-cache \
     py3-pip \
     docker-cli
 
-# Outils DevSecOps pré-installés
 RUN pip install --no-cache-dir yamllint && \
-    curl -sSLo /usr/local/bin/kubectl "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" && \
+    curl -sSLo /usr/local/bin/kubectl "https://dl.k8s.io/release/v1.36.3/bin/linux/amd64/kubectl" && \
     curl -sSLo /usr/local/bin/helm "https://get.helm.sh/helm-v3.14.0-linux-amd64.tar.gz" && \
     chmod +x /usr/local/bin/kubectl