[Migrated PR #51] fix: allow non-root release secret validation #8

Open
opened 2026-10-09 04:25:51 +00:00 by moeardent · 1 comment
Owner

Fixes the release image failure where the BuildKit leak-sentinel secret was root-readable while the Dockerfile final stage runs as UID/GID 10001. Adds an image-contract regression assertion. Local contract suite: 17 passed, 9 subtests passed.

Source PR branches: fix/release-secret-mount-permissions -> main

Fixes the release image failure where the BuildKit leak-sentinel secret was root-readable while the Dockerfile final stage runs as UID/GID 10001. Adds an image-contract regression assertion. Local contract suite: 17 passed, 9 subtests passed. Source PR branches: fix/release-secret-mount-permissions -> main <!-- migrated-from: pull-request-fallback Moebiusol/odoo-custom-addons #51 -->
Author
Owner

Migrated Codeberg review

  • Reviewer: cristianlorand
  • State: APPROVED
  • Submitted: 2026-08-11T11:39:00+02:00
  • Commit: 5ee360b4b4fd548f7cac8ec381a940e3003866bd

(no review body)

### Migrated Codeberg review - Reviewer: `cristianlorand` - State: `APPROVED` - Submitted: `2026-08-11T11:39:00+02:00` - Commit: `5ee360b4b4fd548f7cac8ec381a940e3003866bd` (no review body) <!-- migrated-from: review Moebiusol/odoo-custom-addons #1672289 -->
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: moebiusol/odoo-custom-addons#8
No description provided.