fix: preserve node-webapp Dockerfiles #8

2026-07-11T19:07:16Z

KofTwentyTwo commented

2026-07-11 19:07:16 +00:00

(Migrated from github.com)

Summary

add backward-compatible docker.use_repo_dockerfile support for node-webapp
preserve legacy generated images when the option is omitted
reject opted-in repositories that do not provide a root Dockerfile
document and test both paths

Root cause

node-webapp always overwrote repository Dockerfiles despite the public documentation describing custom Dockerfile support. Investing in Chester reproduced the impact when the generated distroless image failed Trivy on six HIGH OpenSSL CVEs and bypassed its uid/gid 1001 Alpine runtime contract.

Verification

654 script and template assertions pass
yamllint passes
shellcheck passes
feature orb dev:894a550312a45bee6a4fe689138d01ca6267a311 published and validated by the Investing in Chester PR and production pipeline

Closes #7

## Summary - add backward-compatible `docker.use_repo_dockerfile` support for `node-webapp` - preserve legacy generated images when the option is omitted - reject opted-in repositories that do not provide a root Dockerfile - document and test both paths ## Root cause `node-webapp` always overwrote repository Dockerfiles despite the public documentation describing custom Dockerfile support. Investing in Chester reproduced the impact when the generated distroless image failed Trivy on six HIGH OpenSSL CVEs and bypassed its uid/gid 1001 Alpine runtime contract. ## Verification - 654 script and template assertions pass - yamllint passes - shellcheck passes - feature orb `dev:894a550312a45bee6a4fe689138d01ca6267a311` published and validated by the Investing in Chester PR and production pipeline Closes #7

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/Munitor#8