Skip to content

adding receipt package from repository-lib#127

Open
Pedram-A-Keyvani wants to merge 4 commits intomainfrom
mars-repository-lib-biosamples
Open

adding receipt package from repository-lib#127
Pedram-A-Keyvani wants to merge 4 commits intomainfrom
mars-repository-lib-biosamples

Conversation

@Pedram-A-Keyvani
Copy link
Copy Markdown
Collaborator

No description provided.

Copy link
Copy Markdown
Collaborator

@kdp-cloud kdp-cloud left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As far as I can assess the changes, LGTM.
There are some valid concerns expressed in the Dockerfiles regarding the injection of secrets through ENV or ARG vars. It would be good to investigate the mounting of secrets at build time: https://docs.docker.com/build/building/secrets/.

I think it's a good idea to have @dipayan1985 review this PR as well, as he is the one that will be consuming the library.

Nice work though! Thanks!

@Pedram-A-Keyvani
Copy link
Copy Markdown
Collaborator Author

I changed the "build args" to the "secrets" approach.

  • The credentials don't get baked into image layers.
  • They are mounting into the build container's filesystem only for the duration of a single RUN instruction.

@kdp-cloud kdp-cloud requested review from apriltuesday and dipayan1985 and removed request for bedroesb April 17, 2026 07:31
Copy link
Copy Markdown
Collaborator

@kdp-cloud kdp-cloud left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @Pedram-A-Keyvani!
I approve you PR but would like either @dipayan1985 or @apriltuesday to review it as well before merging.

Copy link
Copy Markdown
Collaborator

@apriltuesday apriltuesday left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me as well, I believe the current plan is to merge #123 first and then resolve conflicts in this one (correct me if I'm wrong Pedram), so I'll save my ✅ till that's done.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants