nouvelle verson ci-cd avec gitea runner natif intallé sur hote

.gitea/workflows/ci-develop.yml

@@ -11,44 +11,51 @@ jobs:
 
     steps:
 
-      # 1) Node.js
-      - name: Ensure Node.js is installed
+      # 1) Vérifier Node.js (aucune installation automatique en CI natif)
+      - name: Verify Node.js
         shell: sh
         run: |
           if command -v node >/dev/null 2>&1; then
-            echo "Node.js already installed: $(node -v)"
+            echo "Node.js version:"
+            node -v
           else
-            apk update && apk add --no-cache nodejs
-            echo "Node.js installed: $(node -v)"
+            echo "❌ Node.js is not installed on the runner"
+            exit 1
           fi
 
-      # 2) Java & Maven
-      - name: Ensure Java & Maven are installed
+      # 2) Vérifier Java & Maven (préinstallés sur le VPS)
+      - name: Verify Java & Maven
         shell: sh
         run: |
           if ! command -v java >/dev/null 2>&1; then
-            apk update && apk add --no-cache openjdk17-jdk
+            echo "❌ Java is not installed on the runner"
+            exit 1
           fi
-          java -version
 
           if ! command -v mvn >/dev/null 2>&1; then
-            apk update && apk add --no-cache maven
+            echo "❌ Maven is not installed on the runner"
+            exit 1
           fi
+
+          echo "Java version:"
+          java -version
+          echo "Maven version:"
           mvn -version
 
-      # 3) JAVA_HOME
+      # 3) Détecter JAVA_HOME dynamiquement
       - name: Detect JAVA_HOME dynamically
         shell: sh
         run: |
           JAVA_BIN=$(readlink -f "$(command -v java)")
           JAVA_HOME=$(dirname "$(dirname "$JAVA_BIN")")
+          echo "Detected JAVA_HOME=$JAVA_HOME"
           echo "JAVA_HOME=$JAVA_HOME" >> "$GITHUB_ENV"
 
-      # 4) Checkout
+      # 4) Checkout du dépôt
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      # 5) Secrets runtime (CI)
+      # 5) Création des secrets runtime (CI uniquement)
       - name: Create runtime secrets
         shell: sh
         run: |
@@ -58,21 +65,15 @@ jobs:
           echo "${{ secrets.POSTGRES_PASSWORD_FISCAD }}" > secrets/postgresPassword.txt
           chmod 600 secrets/*
 
-      # 6) Vérification outils
-      - name: Show Java & Maven versions
+      # 6) Build & tests Maven
+      - name: Build & Test with Maven
         shell: sh
         run: |
-          echo "JAVA_HOME=$JAVA_HOME"
-          java -version
-          mvn -version
+          mvn -B clean verify
 
-      # 7) Build & tests
-      - name: Build with Maven
-        shell: sh
-        run: mvn -B clean verify
-
-      # 8) Nettoyage
+      # 7) Nettoyage des secrets (sécurité)
       - name: Cleanup secrets
         if: always()
         shell: sh
-        run: rm -rf secrets
+        run: |
+          rm -rf secrets