Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile.dist
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@

## Build

FROM registry.access.redhat.com/ubi9/go-toolset:1.26.3@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build
FROM registry.access.redhat.com/ubi9/go-toolset:1.26.5@sha256:444e81b3e88d8a68b92a081a7b3abc7d3fed2450f8473ea6b3caebf3bb73a0b8 AS build

Check failure on line 19 in Dockerfile.dist

View workflow job for this annotation

GitHub Actions / Test

Containerfile version incompatible, saw 1.26.5, running with version: 1.26.3

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies Dockerfile.dist, which matches the protected path prefix 'Dockerfile'. The PR has no linked issue providing authorization for changes to governance/infrastructure files. Human approval is required for all protected-path changes.

Suggested fix: A maintainer must review and explicitly approve this Dockerfile change.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

Dockerfile.dist matches the protected path prefix Dockerfile in the repository's governance path configuration. This PR has no linked issue providing authorization for modifications to governance or infrastructure files. While the change is a Renovate-managed patch update (go-toolset 1.26.3 β†’ 1.26.5 with pinned digest), human approval is always required for protected-path changes.

Suggested fix: A human reviewer must explicitly approve this protected-path change. No code remediation is needed β€” the Docker tag bump with pinned digest is mechanically correct.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

Dockerfile.dist matches the protected path prefix Dockerfile. The PR has no linked issue justifying the modification of this governance/infrastructure file. Human approval is required for protected-path changes.

Suggested fix: A maintainer should review and approve this Dockerfile change directly.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies Dockerfile.dist, which falls under the 'Dockerfile' protected path prefix. The PR has no linked issue providing human-authored justification for modifying this infrastructure file. While the change is an automated Renovate patch-level Docker base image update (go-toolset 1.26.3 β†’ 1.26.5) with a pinned digest, human approval is always required for protected-path changes.

Suggested fix: A maintainer should review and approve this Dockerfile change.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies Dockerfile.dist, which falls under the Dockerfile protected path. The PR has no linked issue providing explicit authorization for modifying governance/infrastructure files. While this is an automated Renovate Docker tag patch bump (go-toolset 1.26.3 β†’ 1.26.5) with a pinned digest, and the repository's renovate.json configures Renovate for dependency management, human approval is always required for protected-path changes.

Suggested fix: A maintainer must review and explicitly approve this protected-path change.


ARG TARGETOS
ARG TARGETARCH
Expand Down
Loading