azu / azu/dockerfile-pin

`devcontainer.json` support

Open
#46 0 comments 0 reactions 0 assignees View on GitHub
Status: PR Welcome Status: Proposal
Dominant language
Go
Stars
84
Forks
4
Avg merge
3h 9m
Merged PRs (30d)
6

Description

`.devcontainer/devcontainer.json` has an [`image`](https://containers.dev/implementors/json_reference/#:~:text=Description-,image,-string) property. I want to pin it using `dockerfile-pin`.

```json
{
"name": "node",
"image": "mcr.microsoft.com/devcontainers/javascript-node:24",
"settings": {
"terminal.integrated.defaultProfile.linux": "bash"
},
"extensions": [
"dbaeumer.vscode-eslint",
"esbenp.prettier-vscode"
],
"postCreateCommand": "npm install"
}
```

The field is not required when `dockerComposeFile` or `build.dockerfile` is specified.

```json
{
"dockerComposeFile": "../compose.yaml",
"service": "app",
"workspaceFolder": "/src",
}
```

```json
{
"name": "go",
"build": {
"dockerfile": "../Dockerfile"
}
}
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reading the existing Dockerfile, docker-compose.yml, and GitHub Actions pinning entry points, then trace how an image reference is detected and rewritten. Add support for the image property in .devcontainer/devcontainer.json while leaving configurations using dockerComposeFile or build.dockerfile unaffected. Verify that the devcontainer image receives a digest pin.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, go
Domain
cli, devops
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.