Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

jsonschema: container fix, updated compilation options #121

Merged
merged 2 commits into from
Aug 4, 2023

Conversation

jleightcap
Copy link
Contributor

Summary

Closes #120, towards #118

Release Note

Documentation

Signed-off-by: Jack Leightcap <jack.leightcap@trailofbits.com>
@jleightcap jleightcap marked this pull request as ready for review August 3, 2023 18:30
@@ -1,6 +1,6 @@
# 3.18.2
FROM alpine@sha256:82d1e9d7ed48a7523bdebc18cf6290bdb97b82302a8a9c27d4fe885949ea94d1
RUN apk add --update protoc=3.21.12-r2 protobuf-dev=3.21.12-r2 go=1.20.5-r0 git=2.40.1-r0
RUN apk add --update protoc=3.21.12-r2 protobuf-dev=3.21.12-r2 go=1.20.7-r0 git=2.40.1-r0
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CC @znewman01 for consensus, but I'd personally be okay with removing these pins now that we understand how they interact with the surrounding alpine image: the image itself has a "world" pin that effectively pins each of these dependencies.

(In other words, the pins here are extraneous and only cause trouble when the alpine image is updated automatically and they aren't.)

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ahhh okay. That makes me a little nervous about auto-updates of the image itself. But I guess any big changes due to updates would get caught by the generation tests.

So I say go ahead and remove

woodruffw
woodruffw previously approved these changes Aug 3, 2023
Copy link
Member

@woodruffw woodruffw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM; one comment that I want additional feedback from the other maintainers on 🙂

Dockerfile.jsonschema Outdated Show resolved Hide resolved
Signed-off-by: William Woodruff <william@yossarian.net>
@woodruffw woodruffw merged commit ad8dfad into sigstore:main Aug 4, 2023
3 checks passed
@woodruffw woodruffw deleted the jl/jsonschema branch August 4, 2023 15:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

jsonschema: Docker container dependency conflict
3 participants