Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.4-1782736563 (main)#3368
Conversation
a1fc84c to
76c8528
Compare
|
🤖 Review · |
76c8528 to
0148438
Compare
|
🤖 Finished Review · ✅ Success · Started 2:12 AM UTC · Completed 2:18 AM UTC |
ReviewFindingsHigh
Previous runReviewFindingsHigh
Previous run (2)ReviewFindingsHigh
Labels: PR modifies a Dockerfile (build infrastructure) and is a dependency version bump |
| ## Build | ||
|
|
||
| FROM registry.access.redhat.com/ubi9/go-toolset:1.26.3@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build | ||
| FROM registry.access.redhat.com/ubi9/go-toolset:1.26.3-1782377916@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build |
There was a problem hiding this comment.
[high] protected-path
Dockerfile.dist is under the protected path 'Dockerfile'. This PR has no linked issue providing authorization for changes to governance/infrastructure files. While the change itself is a trivial tag update with an unchanged digest (sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62), human approval is always required for protected-path modifications.
Suggested fix: Obtain explicit human maintainer approval for this Dockerfile change.
0148438 to
0a0bd15
Compare
|
🤖 Finished Review · ✅ Success · Started 2:00 AM UTC · Completed 2:06 AM UTC |
| ## Build | ||
|
|
||
| FROM registry.access.redhat.com/ubi9/go-toolset:1.26.3@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build | ||
| FROM registry.access.redhat.com/ubi9/go-toolset:1.26.4-1782736563@sha256:83cfd595f20e494cea9dc6526f217441e60bb9c5da85b33157c761e5f6a3d852 AS build |
There was a problem hiding this comment.
[high] protected-path
This file matches the Dockerfile protected path. The PR modifies a governance/infrastructure file (Dockerfile.dist) but has no linked issue providing authorization or justification for the change. While this is an automated dependency version bump from MintMaker/Renovate, protected-path changes always require human approval regardless of the change nature.
Suggested fix: A maintainer should review and approve this protected-path change. No code changes are needed — this finding is a governance gate, not a code quality issue.
….4-1782736563 Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
0a0bd15 to
a3fb045
Compare
|
🤖 Finished Review · ✅ Success · Started 2:12 AM UTC · Completed 2:17 AM UTC |
| ## Build | ||
|
|
||
| FROM registry.access.redhat.com/ubi9/go-toolset:1.26.3@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build | ||
| FROM registry.access.redhat.com/ubi9/go-toolset:1.26.4-1782736563@sha256:83cfd595f20e494cea9dc6526f217441e60bb9c5da85b33157c761e5f6a3d852 AS build |
There was a problem hiding this comment.
[high] protected-path
This PR modifies Dockerfile.dist, which falls under the Dockerfile protected path. The PR has no linked issue providing authorization for modifying governance/infrastructure files. Human approval is required for all protected-path changes.
Suggested fix: Link an issue that authorizes this Dockerfile change, or obtain explicit human maintainer approval.
This PR contains the following updates:
1.26.3→1.26.4-1782736563Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Configuration
📅 Schedule: (UTC)
* 0-3 * * *)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.