Martin Vogel e3b517fe29 test(complexity): pin the Dockerfile fixtures' base image by digest ...

Scorecard's PinnedDependencies check opened code-scanning alerts #82-#84
on main for the complexity corpus's Dockerfile fixtures (added by #2597),
and the CodeQL gate blocks on open alerts. The fixtures are indexer input
and are never built; pinning them costs nothing and keeps the gate clean.

Both FROM lines now name alpine:3.20 by its multi-arch index digest. The
`FROM base` stage reference stays: it names the pinned first stage.
complexity suite: 7 passed, fx_Dockerfile nodes 70 -> 139, edges 86 -> 173.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-10-12 22:29:02 +02:00

..

compose.yaml

feat(mcp): trace_path run mode; the container layer documented and guarded

2026-10-11 19:26:10 +02:00

Dockerfile

test(complexity): pin the Dockerfile fixtures' base image by digest

2026-10-12 22:29:02 +02:00

Dockerfile.worker

test(complexity): pin the Dockerfile fixtures' base image by digest

2026-10-12 22:29:02 +02:00

run.sh

feat(mcp): trace_path run mode; the container layer documented and guarded

2026-10-11 19:26:10 +02:00