Files
opengist/TODO.AI.md
T
jason d069ff42fe 📝 Log Dockerfile OCI-label compliance finding to TODO.AI.md 📝
Found while regenerating .env.scripts in Step 1: gen-dockerfile --update
left the Dockerfile with zero diff, but it still carries three labels
AI.md's OCI label standard explicitly says must not exist. Not fixed
here to keep this pass scoped to the template-update runbook and the
build/test verification the user asked for; logging so it isn't lost.

- TODO.AI.md: add a new item for org.opencontainers.image.base.name,
  org.opencontainers.image.schema-version, and the duplicate/wrong-value
  org.opencontainers.image.authors label in Dockerfile
2026-08-03 11:37:21 -04:00

2.0 KiB

TODO.AI.md

Pre-existing script-lint findings on rootfs/usr/local/etc/docker/functions/entrypoint.sh, found while fixing the container restart-loop bug. Not caused by that fix; deferred here since they are unrelated cleanup, not a functional regression. This file is fully regenerated from the shared upstream template (casjay-dotfiles/scripts) on every template-update run, so these findings must be fixed upstream in the template, not patched locally in this repo — a local patch would be silently overwritten by the next AI.md runbook run.

Read: AI.md (Docker Template Update Runbook), Step 3/5

  • grep calls missing -- before the pattern (lines 80, 92, 105, 111, 139, 140, 141, 166, 167, 169, 178, 229, 388, 693, 749, 759, 790, 792, 803, 820, 863, 909, 920, 944) — add -- per ~/.claude/memory/tool_conventions.md
  • __fix_permissions() (line 744): change_user/change_group assigned without local
  • __initialize_db_users() (lines 1380-1385): db_normal_user, db_normal_pass, db_admin_user, db_admin_pass assigned without local
  • __initialize_custom_bin_dir() (line 1428): create_bin_name assigned without local
  • No VERSION= assignment in body to match the ##@Version header (functions library — confirm whether versioning is required for this file type before adding)

[ ] Remove forbidden OCI labels from Dockerfile

Read: AI.md § OCI label standard (lines 55-85)

Found during the build/test pass — gen-dockerfile --update left the Dockerfile untouched (zero diff), but it still carries labels AI.md explicitly says must not exist:

  • LABEL org.opencontainers.image.base.name="${IMAGE_NAME}" — belongs on the base image, not the app image; remove
  • LABEL org.opencontainers.image.schema-version="${BUILD_VERSION}" — non-spec, redundant with version; remove
  • LABEL org.opencontainers.image.authors="${LICENSE}" — duplicate authors label with the wrong value (a license string, not an author); remove or fix