Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .changeset/patch-fix-alpine-dockerfile.md

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

5 changes: 5 additions & 0 deletions .github/aw/actions-lock.json
Original file line number Diff line number Diff line change
Expand Up @@ -150,6 +150,11 @@
"version": "v3.12.0",
"sha": "8d2750c68a42422c14e847fe6c8ac0403b4cbd6f"
},
"docker/setup-qemu-action@v3": {
"repo": "docker/setup-qemu-action",
"version": "v3",
"sha": "c7c53464625b32c7a7e944ae62b3e17d2b600130"
},
"erlef/setup-beam@v1": {
"repo": "erlef/setup-beam",
"version": "v1.20.4",
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release.lock.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

8 changes: 4 additions & 4 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,17 +1,17 @@
# Dockerfile for GitHub Agentic Workflows compiler
# Provides a minimal container with gh-aw, gh CLI, git, and jq

# Use Alpine for minimal size (official distribution)
FROM alpine:3.21
# Use Alpine 3.19 for minimal size (3.20+ removed gh CLI due to Python 3.12 compatibility)
FROM alpine:3.19
Copy link

Copilot AI Feb 16, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Alpine 3.19 was released in December 2023 and typically receives security updates for approximately 2 years. By February 2026, this version may be approaching or past its end-of-life for security support. While this downgrade is necessary for gh CLI availability, consider monitoring Alpine package repositories for when gh CLI support is restored in newer versions (3.20+). You may want to add a reminder or tracking issue to upgrade once a newer Alpine version with gh CLI support becomes available.

Suggested change
FROM alpine:3.19
# TODO(security): Monitor Alpine releases and upgrade to 3.20+ once the `gh` CLI package is available again.
ARG ALPINE_VERSION=3.19
FROM alpine:${ALPINE_VERSION}

Copilot uses AI. Check for mistakes.

# Install required dependencies
RUN apk add --no-cache \
RUN apk update && apk add --no-cache \
git \
jq \
bash \
curl \
ca-certificates \
github-cli
gh

# Docker Buildx automatically provides these ARGs for multi-platform builds
# Expected values: TARGETOS=linux, TARGETARCH=amd64|arm64
Expand Down
5 changes: 5 additions & 0 deletions pkg/workflow/data/action_pins.json
Original file line number Diff line number Diff line change
Expand Up @@ -150,6 +150,11 @@
"version": "v3.12.0",
"sha": "8d2750c68a42422c14e847fe6c8ac0403b4cbd6f"
},
"docker/setup-qemu-action@v3": {
"repo": "docker/setup-qemu-action",
"version": "v3",
"sha": "c7c53464625b32c7a7e944ae62b3e17d2b600130"
},
"erlef/setup-beam@v1": {
"repo": "erlef/setup-beam",
"version": "v1.20.4",
Expand Down