Skip to content

[GPCAPIM-289] - Add dependacies to dev container image#117

Open
DWolfsNHS wants to merge 5 commits intomainfrom
bugfix/GPCAPIM-289
Open

[GPCAPIM-289] - Add dependacies to dev container image#117
DWolfsNHS wants to merge 5 commits intomainfrom
bugfix/GPCAPIM-289

Conversation

@DWolfsNHS
Copy link
Collaborator

Include necessary development libraries in the dev contatiner.

- Define STUB_SDS, STUB_PDS, and STUB_PROVIDER in the workflow environment
@github-actions
Copy link

github-actions bot commented Mar 19, 2026

Trivy gate: no Critical/High issues.

Trivy IaC (Terraform) Summary

Severity Count
CRITICAL 0
HIGH 0
MEDIUM 0
LOW 0
UNKNOWN 0
Findings (top 50)
Severity ID Title File

@github-actions
Copy link

github-actions bot commented Mar 19, 2026

Trivy gate: no Critical/High vulnerabilities.

Trivy Image Scan Summary

Image: 900119715266.dkr.ecr.eu-west-2.amazonaws.com/whoami:bugfix-gpcapim-289

Severity Count
CRITICAL 0
HIGH 0
MEDIUM 0
LOW 0
UNKNOWN 0

✅ No vulnerabilities found.

@github-actions
Copy link

github-actions bot commented Mar 19, 2026

Trivy gate: no Critical/High vulnerabilities.

Trivy Image Scan Summary

Image: 900119715266.dkr.ecr.eu-west-2.amazonaws.com/whoami:bugfix-gpcapim-289

Severity Count
CRITICAL 0
HIGH 0
MEDIUM 0
LOW 0
UNKNOWN 0

✅ No vulnerabilities found.

@DWolfsNHS DWolfsNHS marked this pull request as ready for review March 19, 2026 12:32
@DWolfsNHS DWolfsNHS requested a review from a team as a code owner March 19, 2026 12:33
Copilot AI review requested due to automatic review settings March 19, 2026 12:33
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the build/dev container image to include additional development libraries needed for building dependencies inside the container.

Changes:

  • Add libxml2-dev and libxslt-dev to the Alpine apk add package list.
  • Adjust the package list around zstd-dev to include the new dependencies.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot AI review requested due to automatic review settings March 19, 2026 12:38
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds missing native development libraries to the build/dev container image so Python packages that depend on libxml2/libxslt can compile successfully in the devcontainer/CI build environment.

Changes:

  • Install libxml2-dev and libxslt-dev in the build-container image.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

- Copy dev certificates into the gateway-api image build context if present
- Update .gitignore to include dev-certificates directory
Copilot AI review requested due to automatic review settings March 19, 2026 16:13
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds development-time dependencies and optional dev CA certificate propagation into the gateway-api image build context to better align trust stores between the dev container and the built image.

Changes:

  • Ignore resources/dev-certificates in the gateway-api image build context.
  • Optionally copy dev certificates into the gateway-api Docker build context and install them in the gateway-api image when present.
  • Add libxml2-dev and libxslt-dev to the build-container image to support builds needing those native libs.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.

File Description
infrastructure/images/gateway-api/resources/.gitignore Ignores dev certificate build-context directory.
infrastructure/images/gateway-api/Dockerfile Installs dev CA certificates from the build context when provided.
infrastructure/images/build-container/Dockerfile Adds XML/XSLT development libraries to the build container.
Makefile Copies dev certificates into the gateway-api image build context when present.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +16 to +18
cp -r /resources/dev-certificates/* /usr/local/share/ca-certificates/; \
update-ca-certificates; \
cp -r /resources/dev-certificates/* /etc/ssl/certs/; \
Comment on lines +16 to +18
cp -r /resources/dev-certificates/* /usr/local/share/ca-certificates/; \
update-ca-certificates; \
cp -r /resources/dev-certificates/* /etc/ssl/certs/; \
Comment on lines +46 to +47
@if [ -d "/resources/dev-certificates" ]; then \
rm -rf ../infrastructure/images/gateway-api/resources/dev-certificates; \
@sonarqubecloud
Copy link

@github-actions
Copy link

Deployment Complete

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants