python version avoid vulnerabilities

.gitea/workflows/build.yaml

@@ -11,7 +11,9 @@ jobs:
 
     env: 
       GITEA_SERVER: https://git.rehounou.ca
+      GITEA_REGISTRY: git.rehounou.ca
       GITEA_TOKEN: ${{ secrets.REPO_GITEA_TOKEN }}
+      PROJECT_NAME: cal_heatmap
 
     steps:
       - name: Checkout repository
@@ -26,26 +28,28 @@ jobs:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
+      - name: Login to Gitea Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.GITEA_REGISTRY }}
+          username: ${{ secrets.REPO_USERNAME }} 
+          password: ${{ secrets.REPO_GITEA_TOKEN }}
+
       - name: Build and push Docker image
         uses: docker/build-push-action@v2
+        env:
+          ACTIONS_RUNTIME_TOKEN: ''
         with:
           context: .
           file: ./Dockerfile
           push: true
-          tags: ${{ secrets.DOCKER_USERNAME }}/cal_heatmap:latest
+          tags: |
+            ${{ secrets.DOCKER_USERNAME }}/cal_heatmap:latest
+            ${{ secrets.DOCKER_USERNAME }}/cal_heatmap:1.0.0
 
-  push_to_gitea:
-    runs-on: ubuntu-latest
-    needs: build
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v2
-
-      - name: Push to Gitea
-        env:
-          GITEA_SERVER: ${{ secrets.ADDRESS_GITEA_SERVER }}
-          GITEA_TOKEN: ${{ secrets.REPO_GITEA_TOKEN }}
+      - name: Build and Push Docker Image
         run: |
-          docker tag ${{ secrets.DOCKER_USERNAME }}/cal_heatmap:latest ${GITEA_SERVER}/my-repo/cal_heatmap:latest
-          docker push ${GITEA_SERVER}/my-repo/cal_heatmap:latest
+          docker tag ${{ secrets.DOCKER_USERNAME }}/cal_heatmap:latest git.rehounou.ca/remi/cal_heatmap:1.0.0
+          docker push git.rehounou.ca/remi/cal_heatmap:latest
+          docker push git.rehounou.ca/remi/cal_heatmap:1.0.0
+      

Dockerfile

@@ -1,5 +1,5 @@
 # Use the official Python image as a base image
-FROM python:3.9-slim
+FROM python:3-slim
 
 # Set the working directory in the container
 WORKDIR /app
@@ -11,7 +11,7 @@ RUN pip install --no-cache-dir pip-chill
 COPY . /app
 
 # Generate requirements.txt with pip-chill
-RUN pip-chill > requirements.txt
+#RUN pip-chill > requirements.txt
 
 # Install the required packages based on the newly created requirements.txt
 RUN pip install --no-cache-dir -r requirements.txt
@@ -23,4 +23,4 @@ RUN mkdir /config
 EXPOSE 8501
 
 # Command to run the Streamlit app
-CMD ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0"]
+CMD ["python","-m","streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0"]