diff --git a/.woodpecker.yml b/.woodpecker.yml
index 16d2bd3..ac44244 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -13,6 +13,9 @@ steps:
       REGISTRY_PASSWORD:
         from_secret: REGISTRY_PASSWORD
     commands:
+      - test -n "${REGISTRY_HOSTPORT}"
+      - test -n "${REGISTRY_USERNAME}"
+      - test -n "${REGISTRY_PASSWORD}"
       - echo "${REGISTRY_PASSWORD}" | docker login "${REGISTRY_HOSTPORT}" -u "${REGISTRY_USERNAME}" --password-stdin
       - docker build -t "${REGISTRY_HOSTPORT}/nxtgauge-ai-assistant" -f Dockerfile .
       - docker push "${REGISTRY_HOSTPORT}/nxtgauge-ai-assistant"
diff --git a/Dockerfile b/Dockerfile
index 936ae72..1c6d89f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.nxtgauge.com/rust:1.87-alpine AS builder
+FROM registry.nxtgauge.com/rust:alpine AS builder
 RUN apk add --no-cache musl-dev pkgconfig openssl-dev
 WORKDIR /app
 COPY Cargo.toml Cargo.lock* ./
diff --git a/README.md b/README.md
index 827f80b..6190243 100644
--- a/README.md
+++ b/README.md
@@ -58,3 +58,10 @@ cargo run
 
 - Service starts even if Ollama model is unavailable; provider returns graceful fallback responses.
 - STT (`faster-whisper`) is intentionally deferred to phase 2.
+
+## CI (Woodpecker)
+
+Required secrets:
+- `REGISTRY_HOSTPORT`
+- `REGISTRY_USERNAME`
+- `REGISTRY_PASSWORD`