Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -19,12 +19,12 @@
# The CI workflow (.github/workflows/build-push.yaml) resolves the
# `runtime_ref` dispatch input to an rw-base-runtime commit sha and
# bakes that sha into the resulting image tag suffix.
ARG BASE_IMAGE=ghcr.io/runwhen-contrib/rw-base-runtime:latest
ARG BASE_IMAGE=ghcr.io/runwhen-contrib/rw-base-runtime:7309089

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Runtime labels mismatch pinned base

Medium Severity

The default BASE_IMAGE is pinned to ghcr.io/runwhen-contrib/rw-base-runtime:7309089, but CI still tags images and sets io.runwhen.runtime.commit from the current rw-base-runtime@main SHA. Published metadata can claim a newer runtime than the layers in the image once main moves past 7309089.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit d86d320. Configure here.

FROM ${BASE_IMAGE}
USER root

ENV RUNWHEN_HOME=/home/runwhen
ENV PATH "$PATH:/usr/local/bin:/home/runwhen/.local/bin"

Check warning on line 27 in Dockerfile

View workflow job for this annotation

GitHub Actions / build (linux/amd64, amd64, ubuntu-latest)

Legacy key/value format with whitespace separator should not be used

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 27 in Dockerfile

View workflow job for this annotation

GitHub Actions / build (linux/amd64, amd64, ubuntu-latest)

Legacy key/value format with whitespace separator should not be used

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 27 in Dockerfile

View workflow job for this annotation

GitHub Actions / build (linux/arm64, arm64, ubuntu-24.04-arm)

Legacy key/value format with whitespace separator should not be used

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 27 in Dockerfile

View workflow job for this annotation

GitHub Actions / build (linux/arm64, arm64, ubuntu-24.04-arm)

Legacy key/value format with whitespace separator should not be used

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

# Set up directories and permissions.
#
Expand Down
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,4 +14,4 @@ To explore all CodeCollections and tasks, please visit the [CodeCollection Regis
## RunWhen CLI Codecollection
This repository is **one of many** CodeCollections that is used with the [RunWhen Platform](https://www.runwhen.com) and [RunWhen Local](https://docs.runwhen.com/public/v/runwhen-local). It contains CodeBundles that are maintained by the RunWhen team and perform health, operational, and troubleshooting tasks.

Please see the **[contributing](CONTRIBUTING.md)** and **[code of conduct](CODE_OF_CONDUCT.md)** for details on adding your contributions to this project.
Please see the **[contributing](CONTRIBUTING.md)** and **[code of conduct](CODE_OF_CONDUCT.md)** for details on adding your contributions to this project.
Loading