sneak/webhooker
1
0
Fork 0
Code Issues 8 Pull Requests Actions Packages Projects Releases Wiki Activity

Fix Dockerfile and add CI workflow #2

New Issue
Closed
opened 2026-03-01 16:55:56 +01:00 by clawbot · 0 comments
clawbot commented 2026-03-01 16:55:56 +01:00
Collaborator
Copy Link

Critical REPO_POLICIES violations in the Dockerfile:

  1. Unpinned base images — uses golangci/golangci-lint:latest, golang:1.22-alpine, and alpine:latest. ALL external references must be pinned by sha256 hash. This is the most important rule in REPO_POLICIES.
  2. Dockerfile does not run make check — REPO_POLICIES requires make check as a Docker build step so the build fails if the branch is not green.
  3. No CI workflow — missing .gitea/workflows/check.yml that runs docker build . on push.
  4. Separate lint stage — uses a separate golangci/golangci-lint image for linting instead of running it through the Makefile. Should use make check in a single builder stage.

Related to issue #1 (bring repo up to standards).

Critical REPO_POLICIES violations in the Dockerfile: 1. **Unpinned base images** — uses `golangci/golangci-lint:latest`, `golang:1.22-alpine`, and `alpine:latest`. ALL external references must be pinned by sha256 hash. This is the most important rule in REPO_POLICIES. 2. **Dockerfile does not run `make check`** — REPO_POLICIES requires `make check` as a Docker build step so the build fails if the branch is not green. 3. **No CI workflow** — missing `.gitea/workflows/check.yml` that runs `docker build .` on push. 4. **Separate lint stage** — uses a separate `golangci/golangci-lint` image for linting instead of running it through the Makefile. Should use `make check` in a single builder stage. Related to [issue #1](https://git.eeqj.de/sneak/webhooker/issues/1) (bring repo up to standards).
clawbot added the
bot
 label 2026-03-01 16:55:56 +01:00
clawbot self-assigned this 2026-03-01 16:55:56 +01:00
clawbot removed their assignment 2026-03-01 17:21:50 +01:00
sneak closed this issue 2026-03-01 19:01:46 +01:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels   
bot

Agent's turn to work

  
merge-ready

   
needs-checks

   
needs-rebase

   
needs-review

   
needs-rework
No Label
bot
merge-ready
needs-checks
needs-rebase
needs-review
needs-rework
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: sneak/webhooker#2
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?