From 3ab6169ed4e14d8e9c6979163b8ab04095979922 Mon Sep 17 00:00:00 2001
From: Butler Git Steward <butler-git-steward@wayfinderak.internal>
Date: Mon, 14 Sep 2026 00:39:05 +0000
Subject: [PATCH] Use the governed CI toolchain

---
 .gitea/workflows/build-and-push.yml | 41 +++--------------------------
 1 file changed, 4 insertions(+), 37 deletions(-)

diff --git a/.gitea/workflows/build-and-push.yml b/.gitea/workflows/build-and-push.yml
index 5b26324..519f2fe 100644
--- a/.gitea/workflows/build-and-push.yml
+++ b/.gitea/workflows/build-and-push.yml
@@ -38,46 +38,13 @@ jobs:
         run: |
           cd .
           bash scripts/ci-select.sh
-      - name: Install Go and Docker CLI if needed
+      - name: Verify governed runner toolchain
         if: ${{ steps.delivery.outputs.run == 'true' }}
         shell: bash
         run: |
           set -euo pipefail
-
-          need_apt=0
-          need_apk=0
-          if ! command -v go >/dev/null 2>&1 || ! command -v docker >/dev/null 2>&1; then
-            if command -v apt-get >/dev/null 2>&1; then
-              need_apt=1
-            elif command -v apk >/dev/null 2>&1; then
-              need_apk=1
-            else
-              echo "No supported package manager found" >&2
-              exit 1
-            fi
-          fi
-
-          if [ "$need_apt" -eq 1 ]; then
-            apt-get update
-            if ! command -v go >/dev/null 2>&1; then
-              apt-get install -y golang-go
-            fi
-            if ! command -v docker >/dev/null 2>&1; then
-              apt-get install -y docker.io curl dnsutils iputils-ping
-            fi
-          fi
-
-          if [ "$need_apk" -eq 1 ]; then
-            if ! command -v go >/dev/null 2>&1; then
-              apk add --no-cache go
-            fi
-            if ! command -v docker >/dev/null 2>&1; then
-              apk add --no-cache docker-cli curl bind-tools iputils
-            fi
-          fi
-
-          go version
-          docker version
+          test "$(go version)" = 'go version go1.25.13 linux/amd64'
+          docker version >/dev/null
 
       - name: Run tests
         if: ${{ steps.delivery.outputs.run == 'true' }}
@@ -155,4 +122,4 @@ jobs:
             docker push "$tag"
           done <<'EOF'
           ${{ steps.meta.outputs.tags }}
-          EOF
\ No newline at end of file
+          EOF