Critical REPO_POLICIES violations in the Dockerfile:
Unpinned base images — uses golangci/golangci-lint:latest, golang:1.22-alpine, and alpine:latest. ALL external references must be pinned by sha256 hash. This is the most important rule in REPO_POLICIES.
Dockerfile does not run make check — REPO_POLICIES requires make check as a Docker build step so the build fails if the branch is not green.
No CI workflow — missing .gitea/workflows/check.yml that runs docker build . on push.
Separate lint stage — uses a separate golangci/golangci-lint image for linting instead of running it through the Makefile. Should use make check in a single builder stage.
Critical REPO_POLICIES violations in the Dockerfile:
1. **Unpinned base images** — uses `golangci/golangci-lint:latest`, `golang:1.22-alpine`, and `alpine:latest`. ALL external references must be pinned by sha256 hash. This is the most important rule in REPO_POLICIES.
2. **Dockerfile does not run `make check`** — REPO_POLICIES requires `make check` as a Docker build step so the build fails if the branch is not green.
3. **No CI workflow** — missing `.gitea/workflows/check.yml` that runs `docker build .` on push.
4. **Separate lint stage** — uses a separate `golangci/golangci-lint` image for linting instead of running it through the Makefile. Should use `make check` in a single builder stage.
Related to [issue #1](https://git.eeqj.de/sneak/webhooker/issues/1) (bring repo up to standards).
clawbot
self-assigned this 2026-03-01 16:55:56 +01:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Critical REPO_POLICIES violations in the Dockerfile:
golangci/golangci-lint:latest,golang:1.22-alpine, andalpine:latest. ALL external references must be pinned by sha256 hash. This is the most important rule in REPO_POLICIES.make check— REPO_POLICIES requiresmake checkas a Docker build step so the build fails if the branch is not green..gitea/workflows/check.ymlthat runsdocker build .on push.golangci/golangci-lintimage for linting instead of running it through the Makefile. Should usemake checkin a single builder stage.Related to issue #1 (bring repo up to standards).