From 487214173b25409b11d7de5baa769b397da853d0 Mon Sep 17 00:00:00 2001
From: Dan Notestein <dan@syncad.com>
Date: Fri, 9 Jan 2026 23:33:16 -0500
Subject: [PATCH] Fix dependency proxy failures in source change detection
 templates

Replace unreliable CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX/docker:24-cli
with the self-hosted docker-builder image that is immune to dependency
proxy issues. The docker-builder image already has git and bash installed,
so the before_script apk add commands are no longer needed.
---
 templates/source_change_detection.gitlab-ci.yml | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/templates/source_change_detection.gitlab-ci.yml b/templates/source_change_detection.gitlab-ci.yml
index cc63649..570b072 100644
--- a/templates/source_change_detection.gitlab-ci.yml
+++ b/templates/source_change_detection.gitlab-ci.yml
@@ -44,6 +44,9 @@ variables:
   SOURCE_CHANGED: "false"
   CI_CHANGED: "false"
 
+  # Docker builder image for upstream/local image lookup jobs
+  DOCKER_BUILDER_TAG: "latest"
+
 # ============================================================================
 # Change Detection Job Template
 # ============================================================================
@@ -182,7 +185,7 @@ variables:
 #   This is useful for testing against a specific branch or pinning to a known good image.
 .find_upstream_image:
   stage: .pre
-  image: ${CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX}/docker:24-cli
+  image: registry.gitlab.syncad.com/hive/common-ci-configuration/docker-builder:${DOCKER_BUILDER_TAG}
   needs: []
   variables:
     # Override these in your job
@@ -199,8 +202,7 @@ variables:
     UPSTREAM_OVERRIDE_TAG: ""
     # Output file name
     UPSTREAM_OUTPUT: "upstream-image.env"
-  before_script:
-    - apk add --no-cache git bash
+  # docker-builder image already has git and bash installed
   script:
     - |
       # Check for override - skip dynamic lookup if specified
@@ -339,7 +341,7 @@ variables:
 # Use this for the "build-or-skip" pattern within the same repo
 .check_local_image:
   stage: .pre
-  image: ${CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX}/docker:24-cli
+  image: registry.gitlab.syncad.com/hive/common-ci-configuration/docker-builder:${DOCKER_BUILDER_TAG}
   needs: []
   variables:
     # Override these in your job
@@ -347,8 +349,7 @@ variables:
     LOCAL_IMAGE: ""
     LOCAL_PATTERNS: ""
     LOCAL_OUTPUT: "local-image.env"
-  before_script:
-    - apk add --no-cache git bash
+  # docker-builder image already has git and bash installed
   script:
     - |
       # Fetch common-ci-configuration scripts
-- 
GitLab