diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index 99f7edc..74545b0 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -52,12 +52,7 @@ jobs: - name: 🔍 Validate Dockerfile Syntax run: | echo "🐳 Validating Dockerfile build context..." - docker build --no-cache -t tor-relay-test . 2>&1 | \ - tee /tmp/docker-build.log || true - if grep -i "error" /tmp/docker-build.log; then - echo "❌ Dockerfile validation failed" - exit 1 - fi + docker build --no-cache -t tor-relay-test . echo "✅ Dockerfile syntax valid" - name: 📝 Lint Shell Scripts diff --git a/.hadolint.yaml b/.hadolint.yaml index 93932a3..982d9a1 100644 --- a/.hadolint.yaml +++ b/.hadolint.yaml @@ -14,6 +14,12 @@ ignored: # latest security patches automatically. - DL3018 + # DL3062: Ignore unpinned Go packages + # Rationale: We intentionally use 'go get -u' to fetch the latest security + # patches for dependencies during our weekly rebuilds. Pinning versions + # would prevent automatic vulnerability remediation. + - DL3062 + # ============================================================================ # Security & Quality Settings # ============================================================================