fix(ml-image-scrub): run tsx directly so the sidecar needs no runtime egress

[robbie-c]

Problem

The sidecar image ran pnpm start as its entrypoint. At container start, that re-invokes corepack, which re-downloads pnpm from the npm registry every boot:

! Corepack is about to download https://registry.npmjs.org/pnpm/-/pnpm-10.29.3.tgz

The build populates corepack's cache as root, but the container runs as the posthog user, so the runtime download is never a cache hit. In production this image has no direct internet egress, so the download is fragile as well as pointless.

Fix

Run the tsx binary directly. It's a production dependency, so it's already installed in the image, and startup does no network I/O.

-CMD ["pnpm", "start"]
+CMD ["node_modules/.bin/tsx", "src/main.ts"]

Related

• PostHog/charts#13096 — runs this image as the scrub sidecar, where the isolated container makes the runtime download fail rather than just being wasteful.

---

Created with PostHog Code

[greptile-apps]

_{Reviews (1): Last reviewed commit: "fix(ml-image-scrub): run tsx directly so..." | Re-trigger Greptile}

[greptile-apps]

_{Reviews (2): Last reviewed commit: "fix(ml-image-scrub): run tsx directly so..." | Re-trigger Greptile}

[stamphog]

Note

🤖 stamphog reviewed 6fd7b53f2ba9108ac22f06fee7d17b87daafdd1e — verdict: REFUSED

Gates denied due to deny-list match on infra/CI-relevant Dockerfile change and T2-never tier; this is container build/deploy tooling with no human or substantive agent review as independent assurance.

• 👍 on the PR from greptile-apps[bot], hex-security-app[bot].
• Gates denied: Dockerfile change to a production sidecar's entrypoint hits the deny-list (deps_toolchain/infra_cicd) and classifies as T2-never
• No human or substantive reviewer approval — the Greptile comments are just status pings, not a review with findings
• Requires a human reviewer familiar with the ml-mirror-image-scrub deployment/sidecar setup to confirm the runtime behavior change is safe before merging

Gate mechanics and policy version

Gate		Result
prerequisites	✓	all clear
deny-list	✗	matches: deps_toolchain, infra_cicd
size	✓	2L, 1F substantive — within ceiling
tier	✗	classified as T2-never: T2-never (2L, 1F, single-area, fix)
stamphog 2.0.0b3		.stamphog/policy.yml @ dc71029 · reviewed head 6fd7b53

[deployment-status-posthog]

Deploy status

Environment	Status	Deployed At	Workflow
dev	✅ Deployed	2026-07-13 08:53 UTC	Run
prod-us	✅ Deployed	2026-07-13 09:08 UTC	Run
prod-eu	✅ Deployed	2026-07-13 09:08 UTC	Run