0 Fork 0

mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-08 19:56:53 +00:00

Files

T

kevinveenbirkenbachandClaude Opus 5 8adf6fd3d1 test(lint): keep exact pip pins out of role Dockerfiles

A version written into a RUN pip install line is read by nothing: dependabot's
pip ecosystem scans requirements*.txt and pyproject.toml, and the repository's
own pip updater scans the package_name: key of an Ansible task. Neither opens a
build recipe, so a pin set there ages until somebody edits the Dockerfile by
hand.

The rule is hard-failing and covers every tracked file under roles/ named
Dockerfile or Dockerfile.<something>, template variants included. A pin counts
only inside the pip install command itself: the scan follows backslash
continuations, stops at the next shell separator, skips whole-line comments,
and ignores a version supplied by an ARG or a Jinja expression.

Suppress with # nocheck: dockerfile-pip-pin, catalogued in suppression.md.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-10-01 04:21:23 +02:00

external.md

refactor(ci): prefix workflows by trigger

2026-08-07 17:05:51 +02:00

integration.md

feat(env): SPOT env-pipeline + INFINITO_* namespace

2026-05-20 20:40:34 +02:00

lint.md

refactor(layout): sort shipped scripts by language and split the unit suite

2026-08-22 01:31:09 +02:00

playwright.md

fix(docs): point every reference at something that exists

2026-09-25 19:35:00 +02:00

README.md

…

regression.md

…

suppression.md

test(lint): keep exact pip pins out of role Dockerfiles

2026-10-01 04:21:23 +02:00

unit.md

refactor(layout): sort shipped scripts by language and split the unit suite

2026-08-22 01:31:09 +02:00

README.md

Test guidance 🧪

This directory contains contributor guidance for automated tests. Its scope is how lint, unit, integration, regression, and Playwright coverage should be structured, selected, and validated.