fix sourcing from repo

Dockerfile

@@ -7,6 +7,7 @@ ARG TOOLS_IMAGE=ghcr.io/betterup/alpine-tools:0.0.1
 # Also used as the image in CI jobs so needs all dependencies
 ####################################################################################################
 
+FROM ${TOOLS_IMAGE} AS tools
 FROM docker.io/library/golang:1.21.0@sha256:ec457a2fcd235259273428a24e09900c496d0c52207266f96a330062a01e3622 AS builder
 ARG SOPS_VERSION="3.7.6-alpine"
 
@@ -64,10 +65,10 @@ RUN groupadd -g $ARGOCD_USER_ID argocd && \
 
 COPY hack/gpg-wrapper.sh /usr/local/bin/gpg-wrapper.sh
 COPY hack/git-verify-wrapper.sh /usr/local/bin/git-verify-wrapper.sh
-COPY --from=TOOLS_IMAGE /usr/local/bin/helm /usr/local/bin/helm
-COPY --from=TOOLS_IMAGE /usr/local/bin/kubectl /usr/local/bin/kubectl
-COPY --from=TOOLS_IMAGE /usr/local/bin/kustomize /usr/local/bin/kustomize
-COPY --from=TOOLS_IMAGE /usr/local/bin/sops /usr/local/bin/sops
+COPY --from=tools /usr/local/bin/helm /usr/local/bin/helm
+COPY --from=tools /usr/local/bin/kubectl /usr/local/bin/kubectl
+COPY --from=tools /usr/local/bin/kustomize /usr/local/bin/kustomize
+COPY --from=tools /usr/local/bin/sops /usr/local/bin/sops
 COPY entrypoint.sh /usr/local/bin/entrypoint.sh
 # keep uid_entrypoint.sh for backward compatibility
 RUN ln -s /usr/local/bin/entrypoint.sh /usr/local/bin/uid_entrypoint.sh