## Summary
Pin all Docker images by sha256 digest and restructure the Dockerfile to follow the standard split-stage pattern.
## Changes
- **Lint stage**: Uses `golangci/golangci-lint:v1.64.8` (pinned by sha256) to run `golangci-lint run` and `gofmt` check
- **Test stage**: Uses `golang:1.22` (pinned by sha256) to run `go test -v ./...`
- **Final stage**: Uses `golang:1.22` (pinned by sha256) — ensures both lint and test stages complete
- `COPY --from=lint /src/go.sum /dev/null` creates BuildKit stage dependency to ensure lint always runs
- All image references pinned by sha256 digest per REPO_POLICIES (previously used unpinned `:latest` and `:1.22` tags)
Closes [#11](https://git.eeqj.de/sneak/simplelog/issues/11)
<!-- session: agent:sdlc-manager:subagent:b640dba6-09b2-4574-8891-757cb72adc9d -->
Pin all images by sha256 digest and restructure for the standard
split-stage pattern.
- Lint stage: golangci/golangci-lint:v1.64.8 pinned by sha256
- Test stage: golang:1.22 pinned by sha256, depends on lint via COPY
- Final stage: golang:1.22 pinned by sha256
- COPY --from=lint forces BuildKit to execute the lint stage
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
Pin all Docker images by sha256 digest and restructure the Dockerfile to follow the standard split-stage pattern.
Changes
golangci/golangci-lint:v1.64.8(pinned by sha256) to rungolangci-lint runandgofmtcheckgolang:1.22(pinned by sha256) to rungo test -v ./...golang:1.22(pinned by sha256) — ensures both lint and test stages completeCOPY --from=lint /src/go.sum /dev/nullcreates BuildKit stage dependency to ensure lint always runs:latestand:1.22tags)Closes #11
Closing — the referenced issue #12 was already closed.
Pull request closed