# Local qualification only; never a production runtime target.
FROM needle-gateway-v2:workflow-tests
USER root
RUN --mount=type=secret,id=cloud_ca \
    apt-get -o Acquire::https::CaInfo=/run/secrets/cloud_ca update \
    && apt-get -o Acquire::https::CaInfo=/run/secrets/cloud_ca install -y --no-install-recommends git \
    && rm -rf /var/lib/apt/lists/*
COPY --from=needle-gateway-v2:workflow /root/.cache/cactus-needle/v3/3.0.1 /root/.cache/cactus-needle/v3/3.0.1
ENV NEEDLE_TELEMETRY=0 DO_NOT_TRACK=1 HF_HUB_OFFLINE=1
ENTRYPOINT ["env","-u","NEEDLE3_LIB_PATH","python","-m","scripts.coverage_workflow"]