pump dependencies and remove unnecessary venv

.gitea/workflows/create_and_push_multiarch_container.yml

@@ -1,4 +1,5 @@
-name: release-tag
+name: build-image
+run-name: build and push Docker-Image
 
 on:
   workflow_dispatch: # Manuelles Auslösen des Workflows
@@ -15,7 +16,7 @@ env:
 
 jobs:
   release-image:
-    runs-on: ubuntu-latest
+    runs-on: build-ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v3

.gitea/workflows/trivy_image_scan.yml

@@ -1,4 +1,5 @@
-name: release-tag
+name: trivy-scan-image
+run-name: Trivy - Scan Docker Image
 
 on:
   workflow_dispatch: # Manuelles Auslösen des Workflows
@@ -7,9 +8,12 @@ on:
         description: 'Tag für das zu scannende Docker-Image z.B. latest'
         required: true
         default: 'latest'
+  schedule:
+    - cron: '45 1 * * 5'
 
 env:
   image_name: mysteryhelfer
+  image_tag: ${{ github.event.inputs.image_tag || 'latest' }}
   registry_gitea: gitea.tebarius.duckdns.org
   user: tebarius
 
@@ -25,4 +29,4 @@ jobs:
           --scanners vuln,misconfig,secret \
           --severity MEDIUM,HIGH,CRITICAL \
           --ignore-unfixed \
-          ${{ env.registry_gitea }}/${{ env.user }}/${{ env.image_name }}:${{ github.event.inputs.image_tag }}
+          ${{ env.registry_gitea }}/${{ env.user }}/${{ env.image_name }}:${{ env.image_tag }}

Dockerfile

@@ -1,14 +1,12 @@
 # Copyright (c) 2025 Martin Kayser (tebarius)
 # Licensed under the MIT License. See LICENSE file in the project root.
-ARG PYTHON_VERSION="3.14"
+FROM python:3.14-slim
-FROM python:${PYTHON_VERSION}-slim
 LABEL authors="tebarius"
 LABEL description="tebarius Mysteryhelfer web"
 
-ARG PYTHON_VERSION
 ENV PYTHONDONTWRITEBYTECODE=1
 ENV PYTHONUNBUFFERED=1
-ENV PATH="/myst-venv/bin:$PATH"
+
 
 RUN apt-get update \
     && apt-get install -y --no-install-recommends curl \
@@ -18,17 +16,16 @@ RUN apt-get update \
 WORKDIR /app
 COPY requirements.txt .
 
-RUN python -m venv /myst-venv \
+RUN python -m pip install --upgrade pip \
-    && python -m pip install --upgrade pip \
     && pip install --no-cache-dir -r requirements.txt
 
 COPY ./app /app
 # ein bisschen Patchen um auch beim Bookmarken oder Versenden der Webadresse per Messenger den richtigen Titel und das
 # richtige Favicon zu verwenden/sehen
-COPY ./app/images/favicon.ico /myst-venv/lib/python${PYTHON_VERSION}/site-packages/streamlit/static/favicon.ico
+COPY ./app/images/favicon.ico /usr/local/lib/python3.14/site-packages/streamlit/static/favicon.ico
 RUN sed -i -e 's|favicon\.png|favicon.ico|' \
         -e 's|<title>.*</title>|<title>tebarius Mysteryhelfer (web)</title>|' \
-        /myst-venv/lib/python${PYTHON_VERSION}/site-packages/streamlit/static/index.html \
+        /usr/local/lib/python3.14/site-packages/streamlit/static/index.html \
     && useradd -m -u 1000 myst \
     && chown -R myst:myst /app
 USER myst