mirror of
https://github.com/Heretek-AI/heretek-devcontainers.git
synced 2026-11-07 18:36:05 -10:00
verify-stack gains --root, local-build and Dockerfile pin checks, and the SELINUX_CONFINED and QUADLET_SOCKET_ACTIVATION rules over quadlet .container, .socket and .service files. Fixture trees under test/fixtures/verify break one rule each; tests assert exit 1 with exactly that rule, replacing the source-contains-rule-names test. scripts/check-images.ts resolves every pinned remote image against Docker Hub or the OCI registry API. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_012AuVk4nEvBXaTjs4G6wdW4