docker-image-pin 0.1.1__py3-none-any.whl → 0.2.0__py3-none-any.whl

docker_image_pin/__init__.py

@@ -27,7 +27,7 @@ def parse_args() -> Args:
     return parser.parse_args(namespace=Args())
 
 
-def main() -> int:
+def main() -> int:  # noqa: C901
     args = parse_args()
 
     retval = 0
@@ -41,10 +41,22 @@ def main() -> int:
         content = file.read_text()
 
         for line in content.splitlines():
-            line = line.strip()  # noqa: PLW2901
+            line = line.strip()
             if not line.startswith("image:"):
                 continue
-            line = line.removeprefix("image:").strip()  # noqa: PLW2901
+
+            if "#" in line:
+                line, comment = line.split("#")
+                line = line.strip()
+                comment = comment.strip()
+                if not comment.startswith("allow-"):
+                    invalid("comment on image did not start with 'allow-'")
+                    continue
+                allow = comment.removeprefix("allow-")
+            else:
+                allow = None
+
+            line = line.removeprefix("image:").strip()
             try:
                 rest, sha = line.split("@")
             except ValueError:
@@ -56,7 +68,7 @@ def main() -> int:
                 invalid("no ':' in leading part")
                 continue
 
-            if version in {"latest", "stable"}:
+            if version in {"latest", "stable"} and allow != version:
                 invalid(f"uses dynamic tag '{version}' instead of pinned version")
                 continue
 

{docker_image_pin-0.1.1.dist-info → docker_image_pin-0.2.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: docker-image-pin
-Version: 0.1.1
+Version: 0.2.0
 Summary: Checks if Docker images are properly pinned in docker-compose.yml files
 Project-URL: bugs, https://github.com/GideonBear/docker-image-pin/issues
 Project-URL: homepage, https://github.com/GideonBear/docker-image-pin

docker_image_pin-0.2.0.dist-info/RECORD

@@ -0,0 +1,6 @@
+docker_image_pin/__init__.py,sha256=Y8vBfdSubUm7jsJyhx-6irMIvvJ4heiTYar_VVVq-S0,2343
+docker_image_pin-0.2.0.dist-info/METADATA,sha256=hL1JfVcZlAmNiT_gopjXcgISE_2iH6LujMAWpsFhO2o,626
+docker_image_pin-0.2.0.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+docker_image_pin-0.2.0.dist-info/entry_points.txt,sha256=RTVvI_T4QdIwZqB1kR4g71CxE8_KeAgj2mmYBeRwok0,59
+docker_image_pin-0.2.0.dist-info/licenses/LICENSE,sha256=OXLcl0T2SZ8Pmy2_dmlvKuetivmyPd5m1q-Gyd-zaYY,35149
+docker_image_pin-0.2.0.dist-info/RECORD,,

docker_image_pin-0.1.1.dist-info/RECORD

@@ -1,6 +0,0 @@
-docker_image_pin/__init__.py,sha256=xq65hQDbFSTw7bjDqFV79nAYIC90oH79P02iDOhvj54,1926
-docker_image_pin-0.1.1.dist-info/METADATA,sha256=OPxG2WgFfCcgpvSSjqXIce5_z9tRkNBuQOmzguAkBlo,626
-docker_image_pin-0.1.1.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-docker_image_pin-0.1.1.dist-info/entry_points.txt,sha256=RTVvI_T4QdIwZqB1kR4g71CxE8_KeAgj2mmYBeRwok0,59
-docker_image_pin-0.1.1.dist-info/licenses/LICENSE,sha256=OXLcl0T2SZ8Pmy2_dmlvKuetivmyPd5m1q-Gyd-zaYY,35149
-docker_image_pin-0.1.1.dist-info/RECORD,,