Fixed deploy pipeline

infra/docker/application/Dockerfile

@@ -34,15 +34,10 @@ RUN CGO_ENABLED=0 GOOS=linux go build -o server ./src/
 # ================================
 # Stage 3: финальный образ
 # ================================
-FROM alpine:3.19
+FROM scratch
 
-# нужен для корректной работы TLS и временных зон
-RUN apk add --no-cache ca-certificates tzdata
-
-WORKDIR /app
-
-COPY --from=backend /app/server ./server
-
-EXPOSE 8080
+COPY --from=backend /app/server /server
+COPY --from=backend /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+COPY --from=backend /usr/share/zoneinfo /usr/share/zoneinfo
 
 ENTRYPOINT ["./server"]

infra/webhook/Dockerfile

@@ -5,8 +5,8 @@ COPY infra/webhook/ .
 RUN go mod download && \
     CGO_ENABLED=0 GOOS=linux go build -o webhook .
 
-FROM alpine:3.19
-RUN apk add --no-cache docker-cli ca-certificates
+FROM scratch
 COPY --from=builder /app/webhook /webhook
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 EXPOSE 9001
 ENTRYPOINT ["/webhook"]