Integrate gotap binary and use command field

[mmaelicke]

Note

Integrates the gotap runner and wires the tool to execute via spec.

• Dockerfile: Builds and installs the spec binary from gotap; cleans up build deps; updates default CMD to spec run foobar --input-file /in/input.json.
• tool.yml: Adds command: "python run.py" for foobar so the runner knows how to invoke the tool.

^{Written by Cursor Bugbot for commit 1293a2d. This will update automatically on new commits. Configure here.}

Summary by CodeRabbit

• Chores
  • Updated build process and tool execution configuration
  • Enhanced tool command definition in configuration settings

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

📝 Walkthrough

Walkthrough

The pull request updates the Docker build process to compile a Go binary from the gotap repository and replaces the Python entry point with this compiled binary. Additionally, a new command field is added to the tool configuration to specify the executable command.

Changes

Cohort / File(s)	Summary
Build system update Dockerfile	Adds new build stage to compile Go binary spec from gotap repository; removes golang-go and git after build; replaces Python run.py entry point with /usr/local/bin/spec binary invocation (+8/-1)
Tool configuration src/tool.yml	Introduces command field under tools.foobar with value "python run.py" (+1/-0)

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

A rabbit hops through Docker's door,
Where Python scripts lived once before,
Now Go compiled, sleek and swift,
Gives the workflow quite a lift! 🐇✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main changes: integrating a gotap binary and introducing the command field in src/tool.yml.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Fix all issues with AI agents

In `@Dockerfile`:
- Around line 12-17: The Dockerfile currently clones gotap without an immutable
ref; update the RUN step that clones https://github.com/hydrocode-de/gotap.git
(the git clone /tmp/gotap, cd /tmp/gotap, go build -o /usr/local/bin/spec
./main.go sequence) to clone a specific release tag (e.g., v0.2.3.1) and use a
shallow clone (--depth 1 or --branch <tag> --depth 1) so the build is
reproducible and smaller, then proceed to build the spec binary and remove
/tmp/gotap as before.

[coderabbitai]

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check if gotap repository exists and list available tags
git ls-remote --tags https://github.com/hydrocode-de/gotap.git | head -20

Repository: VForWaTer/tool_template_python

Length of output: 365

---

Pin gotap to an immutable ref for reproducible, safer builds.

Cloning without a pinned tag makes the image non-deterministic and increases supply-chain risk. The gotap repository has stable releases available (latest: v0.2.3.1); pin to a specific tag and build with --depth 1 for efficiency.

✅ Suggested hardening (pin by tag)

+ARG GOTAP_REF=v0.2.3.1
 RUN apt-get update && apt-get install -y golang-go git && \
-    git clone https://github.com/hydrocode-de/gotap.git /tmp/gotap && \
+    git clone --depth 1 --branch "${GOTAP_REF}" https://github.com/hydrocode-de/gotap.git /tmp/gotap && \
     cd /tmp/gotap && go build -o /usr/local/bin/spec ./main.go && \
     rm -rf /tmp/gotap && \
     apt-get remove -y golang-go git && apt-get autoremove -y && apt-get clean

🤖 Prompt for AI Agents

In `@Dockerfile` around lines 12 - 17, The Dockerfile currently clones gotap
without an immutable ref; update the RUN step that clones
https://github.com/hydrocode-de/gotap.git (the git clone /tmp/gotap, cd
/tmp/gotap, go build -o /usr/local/bin/spec ./main.go sequence) to clone a
specific release tag (e.g., v0.2.3.1) and use a shallow clone (--depth 1 or
--branch <tag> --depth 1) so the build is reproducible and smaller, then proceed
to build the spec binary and remove /tmp/gotap as before.