Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion .dockerignore
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
.git
.venv
.uv_cache
.ruff_cache
Expand Down
5 changes: 5 additions & 0 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -48,6 +48,11 @@
with:
enable-cache: true
cache-dependency-glob: "uv.lock"
- name: Install Temporal CLI
run: |
curl -sSf https://temporal.download/cli.sh | sh

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 8: downloadThenRun not pinned by hash
Click Remediation section below to solve this issue
echo "$HOME/.temporalio/bin" >> $GITHUB_PATH
shell: bash

- name: Install dependencies
run: |
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -122,6 +122,9 @@ jobs:
sudo rm -rf "$AGENT_TOOLSDIRECTORY"

- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
fetch-tags: true

- name: Set up QEMU
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
Expand Down
9 changes: 6 additions & 3 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,10 @@ COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/

# Install build dependencies
# hadolint ignore=DL3008
RUN apt-get update && apt-get install -y --no-install-recommends git && \
rm -rf /var/lib/apt/lists/*
RUN apt-get update && apt-get install -y --no-install-recommends \
git \
build-essential \
&& rm -rf /var/lib/apt/lists/*

WORKDIR /app

Expand All @@ -18,7 +20,8 @@ ENV UV_CACHE_DIR=/root/.cache/uv
COPY pyproject.toml uv.lock ./
COPY shims/ ./shims/
# .dockerignore handles excluding .git if it exists, but we copy it if needed for hatch-vcs
COPY .git/ ./.git/
# Use a wildcard to make the copy optional if .git doesn't exist in some contexts
COPY .gi[t] ./.git/

# Install dependencies into a local .venv
# Use --extra to conditionally install heavy ML dependencies (inference group)
Expand Down
8 changes: 4 additions & 4 deletions pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ name = "coreason_runtime"
dynamic = ["version"]
description = "The official zero-trust, high-throughput kinetic execution engine for the coreason-manifest ontology."
readme = "README.md"
requires-python = "==3.14.*"
requires-python = ">=3.14"
authors = [{ name = "Gowtham A Rao", email = "gowtham.rao@coreason.ai" }]
dependencies = [
"aiohttp>=3.13.4",
Expand Down Expand Up @@ -139,9 +139,9 @@ required-environments = [
coreason = "coreason_runtime.cli:app"

[project.urls]
Homepage = "https://github.com/CoReason-AI/coreason_runtime"
Repository = "https://github.com/CoReason-AI/coreason_runtime"
Documentation = "https://github.com/CoReason-AI/coreason_runtime"
Homepage = "https://github.com/CoReason-AI/coreason-runtime"
Repository = "https://github.com/CoReason-AI/coreason-runtime"
Documentation = "https://github.com/CoReason-AI/coreason-runtime"

[tool.ruff]
line-length = 120
Expand Down
Loading