Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
bare-devcontainer
/
decolint
Public
Notifications
You must be signed in to change notification settings
Fork
1
Star
1
Code
Issues
2
Pull requests
1
Actions
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Security and quality
Insights
feat(rule): add rules for unpinned images in Compose and Dockerfile
- #95
#95
Open
nozaq
wants to merge 21 commits into
main
bare-devcontainer/decolint:main
from
claude/reproducibility-rule-candidates-gwdw8n
bare-devcontainer/decolint:claude/reproducibility-rule-candidates-gwdw8n
Copy head branch name to clipboard
Conversation
Commits
21
(21)
Checks
Files changed
Open
feat(rule): add rules for unpinned images in Compose and Dockerfile
#95
nozaq
wants to merge 21 commits into
main
bare-devcontainer/decolint:main
from
claude/reproducibility-rule-candidates-gwdw8n
bare-devcontainer/decolint:claude/reproducibility-rule-candidates-gwdw8n
Copy head branch name to clipboard
Commits
Commits on Aug 2, 2026
feat(rules): add five reproducibility rules for unpinned references
Show description for a122922
claude
committed
a122922
View commit details
Copy full SHA for a122922
Browse repository at this point
Commits on Aug 4, 2026
fix(rules): correct the Dockerfile and Compose readers
Show description for 58ed502
claude
committed
58ed502
View commit details
Copy full SHA for 58ed502
Browse repository at this point
fix(rules): check every image a Dockerfile build pulls
Show description for cbc73b5
claude
committed
cbc73b5
View commit details
Copy full SHA for cbc73b5
Browse repository at this point
Commits on Aug 5, 2026
fix(rules): reach the last stage sharing a name, as a build does
Show description for 825667c
claude
committed
825667c
View commit details
Copy full SHA for 825667c
Browse repository at this point
fix(rules): read a Feature reference only where one is written
Show description for f192b94
claude
committed
f192b94
View commit details
Copy full SHA for f192b94
Browse repository at this point
fix(rules): read a full Feature version as semver defines one
Show description for 8d92e07
claude
committed
8d92e07
View commit details
Copy full SHA for 8d92e07
Browse repository at this point
fix(rules): address golangci-lint findings in the Dockerfile reader
Show description for 5754f4c
claude
committed
5754f4c
View commit details
Copy full SHA for 5754f4c
Browse repository at this point
Commits on Aug 6, 2026
feat(rules): read the Dockerfile a Compose service builds from
Show description for 5db754d
claude
committed
5db754d
View commit details
Copy full SHA for 5db754d
Browse repository at this point
Commits on Aug 7, 2026
refactor(rules): let each Feature rule word its own finding
Show description for d4cdeea
claude
committed
d4cdeea
View commit details
Copy full SHA for d4cdeea
Browse repository at this point
fix(rules): tell Feature reference forms apart as the spec defines them
Show description for 3c425b8
claude
committed
3c425b8
View commit details
Copy full SHA for 3c425b8
Browse repository at this point
refactor(rules): report every unpinned image from one rule per judgment
Show description for 23bf029
claude
committed
23bf029
View commit details
Copy full SHA for 23bf029
Browse repository at this point
refactor: read a container definition in one place
Show description for 2902ded
claude
committed
2902ded
View commit details
Copy full SHA for 2902ded
Browse repository at this point
Commits on Aug 8, 2026
fix(rules): resolve a FROM written with a variable
Show description for 6ab0ee1
claude
committed
6ab0ee1
View commit details
Copy full SHA for 6ab0ee1
Browse repository at this point
Commits on Aug 9, 2026
refactor(containerdef): read a Compose declaration as one thing
Show description for 5d4a841
claude
committed
5d4a841
View commit details
Copy full SHA for 5d4a841
Browse repository at this point
refactor(containerdef): read a Dockerfile build as one thing
Show description for aefb21f
claude
committed
aefb21f
View commit details
Copy full SHA for aefb21f
Browse repository at this point
refactor(containerdef): return a declaration or nothing
Show description for 3f3258a
claude
committed
3f3258a
View commit details
Copy full SHA for 3f3258a
Browse repository at this point
refactor(containerdef): return the declared forms in resolution order
Show description for e674613
claude
committed
e674613
View commit details
Copy full SHA for e674613
Browse repository at this point
refactor(containerdef): read each form as it is reached
Show description for 5a3d653
claude
committed
5a3d653
View commit details
Copy full SHA for 5a3d653
Browse repository at this point
Merge branch 'main' into claude/reproducibility-rule-candidates-gwdw8n
Show description for 523f23f
claude
committed
523f23f
View commit details
Copy full SHA for 523f23f
Browse repository at this point
test(rules): keep the pin-image-digest tests in one file
Show description for 9144a4f
claude
committed
9144a4f
View commit details
Copy full SHA for 9144a4f
Browse repository at this point
Commits on Aug 11, 2026
Merge branch 'main' into claude/reproducibility-rule-candidates-gwdw8n
Show description for 1c1b491
claude
committed
1c1b491
View commit details
Copy full SHA for 1c1b491
Browse repository at this point
You can’t perform that action at this time.
