Skip to content

Harden installer transport and production runtime privileges - #326

Merged
rmcdaniel merged 6 commits into
mainfrom
fix/187-source-boundaries
Nov 6, 2026
Merged

Harden installer transport and production runtime privileges#326
rmcdaniel merged 6 commits into
mainfrom
fix/187-source-boundaries

Fix CI contract spelling and non-root build-source inspection

32bd4c5
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis succeeded Nov 6, 2026 in 1m 5s

Quality Gate passed

Issues
14 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Annotations

Check warning on line 21 in .devcontainer/docker/Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3Gu3Zid3GKokNLob&open=AaGv3Gu3Zid3GKokNLob&pullRequest=326

Check warning on line 17 in Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3GxSZid3GKokNLoh&open=AaGv3GxSZid3GKokNLoh&pullRequest=326

Check warning on line 65 in Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3GxSZid3GKokNLoi&open=AaGv3GxSZid3GKokNLoi&pullRequest=326

Check warning on line 5 in .devcontainer/docker/Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3Gu3Zid3GKokNLoZ&open=AaGv3Gu3Zid3GKokNLoZ&pullRequest=326

Check warning on line 3 in Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3GxSZid3GKokNLog&open=AaGv3GxSZid3GKokNLog&pullRequest=326

Check warning on line 1 in Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3GxSZid3GKokNLof&open=AaGv3GxSZid3GKokNLof&pullRequest=326

Check warning on line 1 in .devcontainer/docker/Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3Gu3Zid3GKokNLoX&open=AaGv3Gu3Zid3GKokNLoX&pullRequest=326

Check warning on line 52 in .devcontainer/docker/Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3Gu3Zid3GKokNLoc&open=AaGv3Gu3Zid3GKokNLoc&pullRequest=326

Check warning on line 19 in .devcontainer/docker/Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3Gu3Zid3GKokNLoa&open=AaGv3Gu3Zid3GKokNLoa&pullRequest=326

Check warning on line 1 in polyglot/python_worker/Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3Gq2Zid3GKokNLoV&open=AaGv3Gq2Zid3GKokNLoV&pullRequest=326

Check warning on line 132 in .devcontainer/docker/Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3Gu3Zid3GKokNLoe&open=AaGv3Gu3Zid3GKokNLoe&pullRequest=326

Check warning on line 41 in polyglot/python_worker/Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Line is too long. Split it into multiple lines using backslash continuations. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv4fMpXngE2TT3xMhM&open=AaGv4fMpXngE2TT3xMhM&pullRequest=326

Check warning on line 62 in .devcontainer/docker/Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3Gu3Zid3GKokNLod&open=AaGv3Gu3Zid3GKokNLod&pullRequest=326

Check warning on line 3 in .devcontainer/docker/Dockerfile

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use either the version tag or the digest for the image instead of both. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_sample-app&issues=AaGv3Gu3Zid3GKokNLoY&open=AaGv3Gu3Zid3GKokNLoY&pullRequest=326
View more details on SonarQubeCloud