fix: Artifact Hub email consistency and disable Docker Dependabot #65
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
- Comment out docker package-ecosystem in Dependabot config - Docker images reference private ECR repos that Dependabot cannot access - Keeps gomod and github-actions ecosystem checks enabled - Resolves: 'The updater encountered one or more errors' for Dependabot 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
There was a problem hiding this comment.
Pull Request Overview
This PR disables the Docker package ecosystem in Dependabot configuration to prevent update errors. The configuration is commented out rather than deleted, preserving the settings for potential future use.
- Commented out the entire Docker ecosystem section in
.github/dependabot.yml - Added an explanatory comment about private ECR repository access issues
- Maintains gomod and github-actions ecosystem checks as active
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| commit-message: | ||
| prefix: "chore(deps)" | ||
| include: "scope" | ||
| # Disabled: Images reference private ECR repositories that Dependabot cannot access |
There was a problem hiding this comment.
The comment states "Images reference private ECR repositories," but the Dockerfiles (Dockerfile and Dockerfile.debug) actually use public images:
docker.io/golang:1.24(builder stage)gcr.io/distroless/static:nonroot(runtime stage)gcr.io/distroless/base-debian12:debug(debug runtime)
While the codebase does reference private ECR images (e.g., 667741767953.dkr.ecr.us-west-2.amazonaws.com/ml-platform/ray/*), these are in environment variables and configuration files, not in the Dockerfiles that Dependabot's docker ecosystem would scan.
Consider either:
- Updating the comment to accurately reflect the reason for disabling (e.g., "Disabled to reduce noise" or another valid reason), or
- If there are specific Dependabot errors, mention those in the comment
Suggested change
| # Disabled: Images reference private ECR repositories that Dependabot cannot access | |
| # Disabled: To reduce noise from frequent base image updates. Dockerfiles use public images. |
Pull Request Test Coverage Report for Build 19483635287Details
💛 - Coveralls |
vivekr-splunk
changed the title
scai-splunk
approved these changes
Nov 18, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
This PR contains follow-up fixes after PR #64 was merged:
Changes
1. Artifact Hub Email Consistency
opensource@splunk.comtosplunkai@cisco.comChart.yamlmaintainersartifacthub-repo.ymlhelm-chart/splunk-ai-operator/Chart.yamlhelm-chart/splunk-ai-platform/Chart.yaml2. Disable Docker Dependabot Checks
dockerpackage-ecosystem in Dependabot config667741767953.dkr.ecr.us-west-2.amazonaws.com/ml-platform/ray/*667741767953.dkr.ecr.us-west-2.amazonaws.com/ml-platform/saia/*Dependabot Configuration After This PR
Still Enabled:
Now Disabled:
Why These Changes
Email Consistency: Copilot identified that the email address was inconsistent. Using
splunkai@cisco.commatches the existing maintainer email in Chart.yaml files.Docker Dependabot: Dependabot runs were failing because it tries to scan Docker images referenced in the repository, but cannot access private ECR repositories without AWS credentials. Disabling Docker checks allows Go module and GitHub Actions updates to continue working.
Context
Test Plan
Related
🤖 Generated with Claude Code
Co-Authored-By: Claude noreply@anthropic.com