Commit Graph
8 Commits
Author SHA1 Message Date
OpenCode Cabillot fb061f33a1 fix(docker): pin numeric uid/gid so hadolint DL3066 passes
PR Checks / hadolint (pull_request) Successful in 11s
PR Checks / build-test (pull_request) Successful in 31s
hadolint 2.15.x - pulled in by hadolint-action v3.5.0 - adds DL3066
("Non-numeric user-id may not be resolvable by host system"). The
Dockerfile's `USER muser` trips it and the hadolint job exits 1 (hadolint
fails on info-level findings by default), turning the PR Checks pipeline
red on the Renovate bump PR.

muser was created without an explicit uid/gid, so its numeric identity
depended on busybox's auto-assignment. Both ids are now pinned at
1000:1000 - the values Alpine was already assigning - and USER uses the
numeric form, which is always resolvable by the host.

Verified with the upstream hadolint v2.15.1 binary: the previous
Dockerfile reports "Dockerfile:9 DL3066 info" and exits 1, the fixed one
lints clean and exits 0.

The hadolint-action v3.3.0 -> v3.5.0 bump is included here (all four
workflows, SHA 06be81ba) so that master ends up on v3.5.0 with a clean
lint - superseding Renovate PR #23.
2026-09-13 14:41:49 +00:00
renovate 57171f2cb2 chore(deps): update actions/checkout digest to 3d3c42e
renovate/stability-days Updates have met minimum release age requirement
PR Checks / hadolint (pull_request) Successful in 28s
PR Checks / build-test (pull_request) Successful in 58s
2026-09-08 00:22:48 +00:00
renovate 1b0967895c chore(deps): update docker/setup-buildx-action digest to 37fe631
renovate/stability-days Updates have met minimum release age requirement
PR Checks / hadolint (pull_request) Successful in 40s
PR Checks / build-test (pull_request) Successful in 1m10s
2026-09-07 22:20:40 +00:00
renovate 052ef85801 chore(deps): update docker/setup-buildx-action digest to bb05f3f
PR Checks / hadolint (pull_request) Successful in 6s
PR Checks / build-test (pull_request) Successful in 16s
2026-07-02 09:56:03 +00:00
renovate d7eff1f5e9 chore(deps): update actions/checkout action to v7
PR Checks / hadolint (pull_request) Successful in 7s
PR Checks / build-test (pull_request) Successful in 16s
2026-06-18 15:28:08 +00:00
cloudix_mcp_server 5e1827bbc6 fix main.yaml - write raw content, fix WITH_V typo 2026-06-13 17:50:40 -04:00
cloudix_mcp_server 8b583cc276 Convert main.yaml to htpasswd pattern: build directly, no artifacts 2026-06-13 17:48:22 -04:00
cloudix_mcp_server 4e4c866986 feat(ci): add main.yaml — hadolint + build-push + test + tag 2026-06-12 16:08:16 -04:00