Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
FROM rust:1.85.1 AS base

RUN cargo install sccache --version ^0.9
RUN cargo install sccache --version ^0.9 --locked

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Missing --locked flag on cargo-chef install

Low Severity

The --locked flag was added to cargo install sccache but not to the adjacent cargo install cargo-chef command. Both tools are installed the same way, so the inconsistency looks like an oversight. Without --locked, cargo-chef can resolve different transitive dependency versions than what its Cargo.lock specifies, undermining the reproducibility improvement intended by this change.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 9ab8e33. Configure here.

RUN cargo install cargo-chef --version ^0.1

ENV CARGO_HOME=/usr/local/cargo
Expand Down Expand Up @@ -47,7 +47,7 @@ FROM debian:bookworm-slim
WORKDIR /app

RUN apt-get update && \
apt-get install -y netcat-traditional ca-certificates && \
apt-get install -y netcat-traditional ca-certificates curl && \
rm -rf /var/lib/apt/lists/*

ARG TX_PROXY_BIN="tx-proxy"
Expand Down
Loading