From 271022d36b4262d4587c8627daef0eacfb64f7ef Mon Sep 17 00:00:00 2001
From: Nicolas Cantu <nicolas.cantu@pm.me>
Date: Wed, 10 Sep 2025 13:47:02 +0200
Subject: [PATCH] ci(build): normalize DOCKER_TAG in script (strip heads/,
 lowercase, safe chars)

---
 scripts/build_and_push.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/scripts/build_and_push.sh b/scripts/build_and_push.sh
index 69acf50..ecc5fae 100644
--- a/scripts/build_and_push.sh
+++ b/scripts/build_and_push.sh
@@ -13,6 +13,10 @@ if [ -z "${DOCKER_TAG:-}" ]; then
   exit 1
 fi
 
+# Normalisation du tag pour Docker (sécurité côté script)
+DOCKER_TAG=${DOCKER_TAG##*/}
+DOCKER_TAG=$(printf "%s" "$DOCKER_TAG" | tr '[:upper:]' '[:lower:]' | sed 's/[^a-z0-9_.-]/-/g')
+
 echo "[docker] registry=${REGISTRY} namespace=${NAMESPACE} tag=${DOCKER_TAG}"
 
 if ! command -v docker >/dev/null 2>&1; then