Skip to content

pin versions, use env vars - #5

Merged
darshanime merged 3 commits into
mainfrom
aikido
Aug 17, 2026
Merged

pin versions, use env vars#5
darshanime merged 3 commits into
mainfrom
aikido

Conversation

@darshanime

Copy link
Copy Markdown
Collaborator

No description provided.

Comment thread images/test-ubuntu-git.Dockerfile Outdated
# Consumed by actions/checkout CI/CD validation workflows.

FROM ubuntu:latest
FROM ubuntu:26.04@sha256:678c6550cc43645e08669028bc177f50be4e7c5b8cca677067b1914d4afc7a03

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can't we use a tag instead of SHA?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ack, for docker that tags are immutable so a tag works.

CodeQL default setup is enabled on this repo, so the advanced workflow's
SARIF upload is rejected every run:

  CodeQL analyses from advanced configurations cannot be processed
  when the default setup is enabled

Default setup already scans src/ and passes as
"Analyze (javascript-typescript)". This file was the stock upstream
template with no custom queries, so nothing is lost by dropping it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@darshanime
darshanime merged commit ee26326 into main Aug 17, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants