Split Dockerfile: pre-built golangci-lint stage for faster CI #9

New Issue

2026-03-02T08:50:55+01:00

clawbot commented

2026-03-02 08:50:55 +01:00

Goal

Split the Dockerfile into a dedicated lint stage using the pre-built golangci/golangci-lint image, so lint and formatting failures surface much faster without downloading golangci-lint on every build.

Pattern

# Stage 1: Lint (pre-built image, fast)
FROM golangci/golangci-lint@sha256:... AS lint
WORKDIR /src
COPY go.mod go.sum ./
RUN go mod download
COPY . .
RUN make fmt-check
RUN make lint

# Stage 2: Test + Build
FROM golang@sha256:... AS builder
# Force BuildKit to run lint stage
COPY --from=lint /src/go.sum /dev/null
...
RUN make test
RUN make build

Key details

All images pinned by sha256 per REPO_POLICIES
COPY --from=lint creates BuildKit stage dependency (without this, lint stage is silently skipped)
Reference implementation: sneak/upaas Dockerfile

Tracked from sdlc-manager#6.

## Goal Split the Dockerfile into a dedicated lint stage using the pre-built `golangci/golangci-lint` image, so lint and formatting failures surface much faster without downloading golangci-lint on every build. ## Pattern ```dockerfile # Stage 1: Lint (pre-built image, fast) FROM golangci/golangci-lint@sha256:... AS lint WORKDIR /src COPY go.mod go.sum ./ RUN go mod download COPY . . RUN make fmt-check RUN make lint # Stage 2: Test + Build FROM golang@sha256:... AS builder # Force BuildKit to run lint stage COPY --from=lint /src/go.sum /dev/null ... RUN make test RUN make build ``` ## Key details - All images pinned by sha256 per REPO_POLICIES - `COPY --from=lint` creates BuildKit stage dependency (without this, lint stage is silently skipped) - Reference implementation: [sneak/upaas Dockerfile](https://git.eeqj.de/sneak/upaas/src/branch/main/Dockerfile) Tracked from [sdlc-manager#6](https://git.eeqj.de/clawbot/sdlc-manager/issues/6).

clawbot referenced this issue

2026-03-02 10:12:51 +01:00

Split Dockerfile: pre-built golangci-lint stage for faster CI #10

clawbot referenced this issue

2026-03-02 10:12:53 +01:00

Split Dockerfile: pre-built golangci-lint stage for faster CI #11

clawbot referenced this issue

2026-03-02 10:13:08 +01:00

Split Dockerfile: pre-built golangci-lint stage for faster CI #12

clawbot referenced this issue from a commit

2026-03-02 11:13:16 +01:00

fix: split Dockerfile with pinned images and add CI workflow