tftsr-devops_investigation/.docker
Shaun Arman f59559327e
Some checks failed
Test / rust-fmt-check (pull_request) Failing after 0s
PR Review Automation / review (pull_request) Successful in 4m19s
Test / rust-clippy (pull_request) Failing after 2s
Test / frontend-typecheck (pull_request) Successful in 1m45s
Test / rust-tests (pull_request) Failing after 1s
Test / frontend-tests (pull_request) Failing after 1m35s
fix(ci): address AI review — rustup idempotency and cargo --locked
Dockerfiles:
- Merge rustup target add and component add into one chained RUN with
  || true guard, making it safe if rustfmt/clippy are already present
  in the base image's default toolchain profile (rust:1.88-slim default
  profile includes both; the guard is belt-and-suspenders)

test.yml:
- Add --locked to cargo clippy and cargo test to enforce Cargo.lock
  during CI, preventing silent dependency upgrades

Not addressed (accepted/out of scope):
- git in images: already installed in all three Dockerfiles (lines 19,
  13, 15 respectively) — reviewer finding was incorrect
- HTTP registry: accepted risk for air-gapped self-hosted infrastructure
- Image signing (Cosign): no infrastructure in place yet
- Hardcoded registry IP: consistent with project-wide pattern
2026-04-12 18:28:07 -05:00
..
Dockerfile.linux-amd64 fix(ci): address AI review — rustup idempotency and cargo --locked 2026-04-12 18:28:07 -05:00
Dockerfile.linux-arm64 fix(ci): address AI review — rustup idempotency and cargo --locked 2026-04-12 18:28:07 -05:00
Dockerfile.windows-cross feat(ci): add persistent pre-baked Docker builder images 2026-04-05 21:07:17 -05:00