update pipeline

      when: on_success

    - when: never

  script:

    # Create Kaniko Docker auth config

    - mkdir -p /kaniko/.docker

    # Configure Docker auth for GitLab Registry

    - |

      AUTH_JSON=$(cat <<EOF

      {

        "auths": {

          "$CI_REGISTRY": {

            "auth": "$(echo -n "$CI_REGISTRY_USER:$CI_REGISTRY_PASSWORD" | base64)"

          }

        }

      }

      EOF

      )

      echo "$AUTH_JSON" > /kaniko/.docker/config.json

    - echo "{\"auths\":{\"$CI_REGISTRY\":{\"auth\":\"$(echo -n $CI_REGISTRY_USER:$CI_REGISTRY_PASSWORD | base64)\"}}}" > /kaniko/.docker/config.json

    # Determine image tag

    # Determine tag to use

    - |

      if [ -n "$CI_COMMIT_TAG" ]; then

        TAG="$CI_COMMIT_TAG"

        TAG="latest"

      fi

    # Kaniko build and push

    - /kaniko/executor \

    # Build and push the image

    - executor \

        --context $CI_PROJECT_DIR \

        --dockerfile $CI_PROJECT_DIR/Dockerfile \

        --destination $CI_REGISTRY_IMAGE:$TAG \