noel/act-node-docker
Watch
1
0
Fork
You've already forked act-node-docker
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

feat: add ShellCheck to hermetic runner image #1

Merged
noel merged 1 commit from feat/hermetic-shellcheck into main 2026-08-12 13:06:49 +00:00
Conversation 0 Commits 1 Files changed 2 +18 -2
noel commented 2026-08-12 13:06:32 +00:00
Owner
Copy link

Add checksum-pinned ShellCheck 0.11.0 to the source-owned system-hz hermetic runner derivative and verify the exact version during image construction. This closes the networkless CodeWire deploy validation toolchain without widening runner egress.\n\nVerification: Dockerfile parsed through BuildKit; redacted gitleaks clean. The local metadata check stopped at the expected Tailnet-only Nexus DNS boundary before executing a build step. Artifact publication remains a separate reviewed Nexus GitOps transaction.

Add checksum-pinned ShellCheck 0.11.0 to the source-owned system-hz hermetic runner derivative and verify the exact version during image construction. This closes the networkless CodeWire deploy validation toolchain without widening runner egress.\n\nVerification: Dockerfile parsed through BuildKit; redacted gitleaks clean. The local metadata check stopped at the expected Tailnet-only Nexus DNS boundary before executing a build step. Artifact publication remains a separate reviewed Nexus GitOps transaction.
noel merged commit a0a59d4341 into main 2026-08-12 13:06:49 +00:00
noel deleted branch feat/hermetic-shellcheck 2026-08-12 13:06:49 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
noel/act-node-docker!1
No description provided.