codebase-memory-mcp/tests/fixtures/complexity/Dockerfile/Dockerfile.worker at a35671e962f1f2fb4e94deaf55e71cf05f6b3828 - codebase-memory-mcp - Gitea OVH

nprasad2077/codebase-memory-mcp

0 Fork 0

mirror of https://github.com/DeusData/codebase-memory-mcp.git synced 2026-11-06 16:53:56 +00:00

Files

T

Martin Vogel e3b517fe29 test(complexity): pin the Dockerfile fixtures' base image by digest

Scorecard's PinnedDependencies check opened code-scanning alerts #82-#84
on main for the complexity corpus's Dockerfile fixtures (added by #2597),
and the CodeQL gate blocks on open alerts. The fixtures are indexer input
and are never built; pinning them costs nothing and keeps the gate clean.

Both FROM lines now name alpine:3.20 by its multi-arch index digest. The
`FROM base` stage reference stays: it names the pinned first stage.
complexity suite: 7 passed, fx_Dockerfile nodes 70 -> 139, edges 86 -> 173.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-10-12 22:29:02 +02:00

5 lines

173 B

Docker

Raw Blame History

 FROM alpine:3.20@sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc
 ENV APP_MODE=worker
 COPY run.sh /usr/local/bin/run.sh
 CMD ["/usr/local/bin/run.sh"]