Skip to content

Sanitize Docker evidence image tags - #171

Merged
seonghobae merged 1 commit into
mainfrom
codex/opencode-docker-tag-sanitize
Jun 30, 2026
Merged

Sanitize Docker evidence image tags#171
seonghobae merged 1 commit into
mainfrom
codex/opencode-docker-tag-sanitize

Conversation

@seonghobae

Copy link
Copy Markdown
Contributor

Summary

  • lowercase Docker evidence tag suffixes before docker build
  • build changed Dockerfiles from repository root so nested Dockerfiles can COPY repo files

Validation

  • git diff --check

@opencode-agent opencode-agent Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

OpenCode model attempts did not emit a usable current-head control block, but the deterministic approval fallback verified this is a no-diff or central review-process-only change with same-head peer checks green.

Findings

No blocking findings.

Changed-file evidence

  • .github/workflows/opencode-review.yml

Summary

Reviewed the bounded no-diff or central review process change list and peer GitHub Checks for current head 7b9104e7d9912742112d1bda342e612c2f5a8579. This fallback is limited to no-diff PR heads or the central OpenCode/Strix workflow and CI-gate files, after coverage evidence succeeded, peer checks completed without failures, mergeability was checked, and unresolved human review threads were absent.

Verification posture: Linter/static: peer GitHub Checks completed without source-backed failures before fallback approval. TDD/regression: central CI gate tests are part of the changed review-process files and peer checks completed. Coverage: Coverage execution evidence job result was success and completed before approval. Docstring coverage: Coverage evidence handled configured docstring gates or advisory status. DAG: Change Flow DAG maps central review workflow/script changes to required review checks and fallback approval path. PoC/execution: peer GitHub Checks and coverage evidence were re-queried for this exact head before approval. DDD/domain: no product domain code is in the fallback allowlist. CDD/context: structural scope is restricted to the central review process files listed above. Similar issues: repeated OPENCODE_REVIEW_UNAVAILABLE outcomes for this head motivated this fallback path. Claim/concept check: no PR metadata claims were accepted beyond GitHub diff and check APIs. Standards search: not applicable for this process-only fallback. Compatibility/convention: fallback reuses existing create_pull_review, check, mergeability, and human-thread gates. Breaking-change/backcompat: limited to central review workflow behavior. Performance: no runtime product path changed. Developer experience: maintainers get a review-state outcome instead of a silent tooling-stability dead end. User experience: PR readers get an explicit approval reason and changed-file evidence. Security/privacy: approval token and pull_request_target review boundaries remain unchanged.

  • Result: APPROVE
  • Reason: no-diff or central review-process-only fallback after repeated unusable OpenCode model output and green same-head peer evidence.
  • Head SHA: 7b9104e7d9912742112d1bda342e612c2f5a8579
  • Workflow run: 28412971723
  • Workflow attempt: 1

Change Flow DAG

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Workflow: opencode-review.yml"]
  S1 --> I1["GitHub Actions review job"]
  I1 --> R1["Review risk: Workflow: opencode-review.yml"]
  R1 --> V1["actionlint plus required checks"]
Loading

@opencode-agent

Copy link
Copy Markdown
Contributor

OpenCode Review Overview

  • Head SHA: 7b9104e7d9912742112d1bda342e612c2f5a8579
  • Workflow run: 28412971723
  • Workflow attempt: 1
  • Gate result: APPROVE (approval step)

Pull request overview

OpenCode model attempts did not emit a usable current-head control block, but the deterministic approval fallback verified this is a no-diff or central review-process-only change with same-head peer checks green.

Findings

No blocking findings.

Changed-file evidence

  • .github/workflows/opencode-review.yml

Summary

Reviewed the bounded no-diff or central review process change list and peer GitHub Checks for current head 7b9104e7d9912742112d1bda342e612c2f5a8579. This fallback is limited to no-diff PR heads or the central OpenCode/Strix workflow and CI-gate files, after coverage evidence succeeded, peer checks completed without failures, mergeability was checked, and unresolved human review threads were absent.

Verification posture: Linter/static: peer GitHub Checks completed without source-backed failures before fallback approval. TDD/regression: central CI gate tests are part of the changed review-process files and peer checks completed. Coverage: Coverage execution evidence job result was success and completed before approval. Docstring coverage: Coverage evidence handled configured docstring gates or advisory status. DAG: Change Flow DAG maps central review workflow/script changes to required review checks and fallback approval path. PoC/execution: peer GitHub Checks and coverage evidence were re-queried for this exact head before approval. DDD/domain: no product domain code is in the fallback allowlist. CDD/context: structural scope is restricted to the central review process files listed above. Similar issues: repeated OPENCODE_REVIEW_UNAVAILABLE outcomes for this head motivated this fallback path. Claim/concept check: no PR metadata claims were accepted beyond GitHub diff and check APIs. Standards search: not applicable for this process-only fallback. Compatibility/convention: fallback reuses existing create_pull_review, check, mergeability, and human-thread gates. Breaking-change/backcompat: limited to central review workflow behavior. Performance: no runtime product path changed. Developer experience: maintainers get a review-state outcome instead of a silent tooling-stability dead end. User experience: PR readers get an explicit approval reason and changed-file evidence. Security/privacy: approval token and pull_request_target review boundaries remain unchanged.

  • Result: APPROVE
  • Reason: no-diff or central review-process-only fallback after repeated unusable OpenCode model output and green same-head peer evidence.
  • Head SHA: 7b9104e7d9912742112d1bda342e612c2f5a8579
  • Workflow run: 28412971723
  • Workflow attempt: 1

Change Flow DAG

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Workflow: opencode-review.yml"]
  S1 --> I1["GitHub Actions review job"]
  I1 --> R1["Review risk: Workflow: opencode-review.yml"]
  R1 --> V1["actionlint plus required checks"]
Loading

@seonghobae
seonghobae merged commit 49ff899 into main Jun 30, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant