FROM docker.io/alpine:3.19

# Dépendances de base et sécurité
RUN apk add --no-cache \
    bash \
    curl \
    git \
    python3 \
    py3-pip \
    docker-cli

# Outils DevSecOps pré-installés
RUN pip install --no-cache-dir yamllint && \
    curl -sSLo /usr/local/bin/kubectl "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" && \
    curl -sSLo /usr/local/bin/helm "https://get.helm.sh/helm-v3.14.0-linux-amd64.tar.gz" && \
    chmod +x /usr/local/bin/kubectl