Image test

[stewartshea]

Note

Low Risk
Build-time base image default only; no application logic, auth, or data handling changes.

Overview
Pins the Dockerfile default BASE_IMAGE from rw-base-runtime:latest to rw-base-runtime:7309089, so default/local builds use that runtime commit instead of a floating latest tag (CI can still override via BASE_IMAGE / workflow inputs as documented).

README.md only gains a trailing newline at EOF; no wording changes.

^{Reviewed by Cursor Bugbot for commit d86d320. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit d86d320. Configure here.}

[cursor]

Runtime labels mismatch pinned base

Medium Severity

The default BASE_IMAGE is pinned to ghcr.io/runwhen-contrib/rw-base-runtime:7309089, but CI still tags images and sets io.runwhen.runtime.commit from the current rw-base-runtime@main SHA. Published metadata can claim a newer runtime than the layers in the image once main moves past 7309089.

 

^{Reviewed by Cursor Bugbot for commit d86d320. Configure here.}