Closed rootulp closed 1 week ago
test/testground/Dockerfile
[warning] 17-17: Always tag the version of an image explicitly (DL3006) --- [info] 50-50: Use the `--no-cache` switch to avoid the need to use `--update` and remove `/var/cache/apk/*` when done installing packages (DL3019) --- [warning] 50-50: Pin versions in apk add. Instead of `apk add` use `apk add = ` (DL3018) --- [warning] 53-53: Use WORKDIR to switch to a directory (DL3003) --- [warning] 63-63: Use WORKDIR to switch to a directory (DL3003) --- [warning] 63-63: CgoEnabled is referenced but not assigned. (SC2154) --- [warning] 68-68: Use WORKDIR to switch to a directory (DL3003) --- [warning] 76-76: Always tag the version of an image explicitly (DL3006) --- [warning] 77-77: Pin versions in apk add. Instead of `apk add ` use `apk add = ` (DL3018)
test/testground/Dockerfile (1)
Line range hint `77-77`: **Pin versions when installing packages.** It's best practice to pin the versions of packages when using `apk add` to ensure the build environment is predictable and consistent. [REFACTOR_SUGGESTion] ```diff - RUN apk add --no-cache bash gcompat curl + RUN apk add --no-cache bash=5.0.17 gcompat=1.0.0 curl=7.69.1 # Replace with the exact versions you need ```
Motivation: because celestia-core v1.37.0 uses NMT v0.21.0 which contains this fix: https://github.com/celestiaorg/nmt/pull/253