Skip to content

Add shim Docker image to update @datadog/datadog-ci#51

Merged
jasonforal merged 1 commit intomainfrom
jf/K9VULN-4306
Mar 25, 2025
Merged

Add shim Docker image to update @datadog/datadog-ci#51
jasonforal merged 1 commit intomainfrom
jf/K9VULN-4306

Conversation

@jasonforal
Copy link
Contributor

@jasonforal jasonforal commented Mar 24, 2025

This action uses the datadog-static-analyzer container, which pre-installs datadog-ci (source here). This freezes datadog-ci to the latest at the time of container compilation, which isn't the intended behavior.

In the long term, we will remove the bundled datadog-ci from the datadog-static-analyzer container (it's an anti-pattern to have an all-in-one container like this). But in the short term, we can fix this by introducing a shim.

This PR creates a new container that takes the original datadog-static-analyzer container and updates datadog-ci, and exposes this (transparently) as a new container. Note that there is a small execution time overhead because a new Docker image must be dynamically generated every time the action is run (initial runs showed ~30 seconds).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants