-
Notifications
You must be signed in to change notification settings - Fork 0
chore(docker): simplify dotnet and add nodejs dockerfile #4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
WalkthroughThe pull request modifies the dotnet Dockerfile to replace a multi-step builder approach with direct curl-based installation, and introduces a new Node.js Dockerfile that uses FNM for Node version management with conditional SDK version installation support. Changes
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes
Possibly related PRs
Pre-merge checks and finishing touches❌ Failed checks (1 warning)
✨ Finishing touches🧪 Generate unit tests (beta)
Tip 📝 Customizable high-level summaries are now available in beta!You can now customize how CodeRabbit generates the high-level summary in your pull requests — including its content, structure, tone, and formatting.
Example instruction:
Note: This feature is currently in beta for Pro-tier users, and pricing will be announced later. Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actionable comments posted: 3
Caution
Some comments are outside the diff and can’t be posted inline due to platform limitations.
⚠️ Outside diff range comments (1)
images/dotnet/Dockerfile (1)
1-1: Pin the base image to a specific version instead of using:latest.Using
lateston the base image can cause unpredictable build failures when the image is updated, impacting reproducibility and CI/CD reliability. The current pinned version for this image is2(e.g.,mcr.microsoft.com/devcontainers/base:2).Update to:
-FROM mcr.microsoft.com/devcontainers/base:latest +FROM mcr.microsoft.com/devcontainers/base:2
📜 Review details
Configuration used: Path: .coderabbit.yaml
Review profile: ASSERTIVE
Plan: Pro
📒 Files selected for processing (2)
images/dotnet/Dockerfile(1 hunks)images/nodejs/Dockerfile(1 hunks)
🧰 Additional context used
🪛 Checkov (3.2.334)
images/nodejs/Dockerfile
[low] 1-1: Ensure the base image uses a non latest version tag
(CKV_DOCKER_7)
[low] 1-8: Ensure that HEALTHCHECK instructions have been added to container images
(CKV_DOCKER_2)
images/dotnet/Dockerfile
[low] 1-9: Ensure that HEALTHCHECK instructions have been added to container images
(CKV_DOCKER_2)
🪛 Hadolint (2.14.0)
images/nodejs/Dockerfile
[warning] 1-1: Using latest is prone to errors if the image will ever update. Pin the version explicitly to a release tag
(DL3007)
[warning] 6-6: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
(DL4006)
images/dotnet/Dockerfile
[warning] 9-9: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
(DL4006)
🔇 Additional comments (1)
images/nodejs/Dockerfile (1)
4-8: Verify fnm install behavior and SDK_VERSION handling.The conditional logic on line 8 is sound: fnm install only runs when SDK_VERSION is explicitly provided. However, verify that:
- FNM is properly initialized in the shell environment after installation (line 6) so subsequent RUN commands can use the
fnmcommand.- The shell context is preserved between RUN instructions when
fnm installexecutes.Consider adding explicit shell initialization if needed, or document the expected container usage pattern.
Summary by CodeRabbit
New Features
Chores
Quick Notes
Title: Set the PR title to
@coderabbitaito have the bot generate one for you.Review: The bot reviews PRs by default. To opt out, add the
no bot reviewerlabel.