Enforce immutable supply chain defaults

This commit is contained in:
ms2k 2026-08-21 14:25:58 +09:00
commit 19ac156f4b

View file

@ -19,7 +19,7 @@ COPY .config .config
COPY contracts contracts
COPY crates crates
COPY docs/api docs/api
CMD ["sh", "-c", "cargo fmt --all --check && cargo clippy --workspace --all-targets --all-features -- -D warnings && cargo nextest run --workspace --all-features && cargo test --workspace --doc"]
CMD ["sh", "-c", "cargo fmt --all --check && cargo clippy --locked --workspace --all-targets --all-features -- -D warnings && cargo nextest run --locked --workspace --all-features && cargo test --locked --workspace --doc"]
FROM rust-tools AS kind-sample-build
WORKDIR /workspace
@ -476,11 +476,22 @@ CMD ["bash", "-ec", "test -s /run/remora-fixture/profile.env && test -n \"$DATAB
FROM ${NODE_IMAGE} AS node-runtime
FROM rust-tools AS contract-check
COPY --from=node-runtime /usr/local/ /usr/local/
WORKDIR /workspace
COPY contracts contracts
RUN npm ci --prefix contracts/typespec \
&& npm ci --prefix contracts/typespec-rust-emitter
COPY docs/api docs/api
COPY crates/remora-contracts/src/generated_wire.rs crates/remora-contracts/src/generated_wire.rs
COPY web/src/api/contracts.ts web/src/api/decode.ts web/src/api/generated-schema.ts web/src/api/
CMD ["npm", "run", "check", "--prefix", "contracts/typespec"]
FROM ${PLAYWRIGHT_IMAGE} AS web-dependencies
COPY --from=node-runtime /usr/local/ /usr/local/
ENV PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
RUN corepack enable pnpm \
&& corepack install --global [email protected]
&& corepack install --global pnpm@11.22.0+sha512.1ff870c4c6133dfd88fb2afc46dd13d47f09c9794b438c6fdb47ca98caf3bc16381ee0be93a091b8e3824cf01f889f46d7d9e20910fb0be1ab0fb5baa80dd621
WORKDIR /workspace/web
COPY web/package.json web/pnpm-lock.yaml web/pnpm-workspace.yaml ./
COPY web/tools/svelte-check/package.json tools/svelte-check/package.json