Uh oh!
There was an error while loading. Please reload this page.
build: add Invoca Dockerfile and Buildkite pipeline - #34
Open
dasbus wants to merge 1 commit into
Open
Conversation
| @@ -0,0 +1,22 @@ | |||
| FROM golang:1.26 AS compile | |||
Comment on lines
+2
to
+3
| RUN curl -fsSL https://deb.nodesource.com/setup_lts.x | bash - \ | ||
| && apt-get install -yq nodejs build-essential |
| COPY . . | ||
| RUN make build | ||
| FROM quay.io/prometheus/busybox-linux-amd64:latest |
Wiz Scan Summary
To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio. |
| COPY . . | ||
| RUN make build | ||
| FROM quay.io/prometheus/busybox-linux-amd64:latest |
There was a problem hiding this comment.
Image Version Using 'latest'
on resource FROM quay.io/prometheus/busybox-linux-amd64:latest
More Details
When building images, always tag them with useful tags which codify version information, intended destination (prod or test, for instance), stability, or other information that is useful when deploying the application in different environments. Do not rely on the automatically-created latest tag
Expected
FROM quay.io/prometheus/busybox-linux-amd64:latest should use a specific version instead of 'latest'
Found
FROM quay.io/prometheus/busybox-linux-amd64:latest uses the 'latest' tag
Rule ID: 91ba29eb-0fe8-4885-9fd8-7f3667a8b689
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
This was referenced Aug 17, 2026
Self-contained multi-stage Dockerfile.invoca (Go 1.26 compile + busybox runtime) and Buildkite pipeline that pushes to invocaops/prometheus with commit SHA and branch-safe tags via buildkit-daemonless. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Shannon Price <sprice@invoca.com>
dasbusforce-pushed
the
invoca-3.13/start-timestamps
branch
from
August 21, 2026 16:22
4125625 to
6dc8f97Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Dockerfile.invoca— self-contained multi-stage build (Go 1.26 compile → busybox runtime), matching the pattern used in the Thanos fork.buildkite/pipeline.yml— pushes toinvocaops/prometheuswith commit SHA and branch-safe tags viabuildkit-daemonlessContext
This branch (
invoca-3.13/start-timestamps) is based on Colin's approvedyrate-start-timestampsbranch. We need to build a Docker image to deploy the start-timestamp-aware yrate code to red.prodref for integration testing. The old Buildkite pipeline frominvoca-2.35.0-extensionswas never ported forward, so this adds a new one.The temporary ST debug-logging commit that was previously bundled here has been split out into #35.
Test plan
🤖 Generated with Claude Code