docker-image-pin 0.1.1__tar.gz → 0.2.0__tar.gz

{docker_image_pin-0.1.1 → docker_image_pin-0.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: docker-image-pin
-Version: 0.1.1
+Version: 0.2.0
 Summary: Checks if Docker images are properly pinned in docker-compose.yml files
 Project-URL: bugs, https://github.com/GideonBear/docker-image-pin/issues
 Project-URL: homepage, https://github.com/GideonBear/docker-image-pin

{docker_image_pin-0.1.1 → docker_image_pin-0.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ requires = [ "hatchling" ]
 
 [project]
 name = "docker-image-pin"
-version = "0.1.1"
+version = "0.2.0"
 description = "Checks if Docker images are properly pinned in docker-compose.yml files"
 readme = "README.md"
 license = "GPL-3.0-only"
@@ -28,13 +28,14 @@ scripts.docker-image-pin = "docker_image_pin:main"
 lint.select = [ "ALL" ]
 
 lint.ignore = [
-    "COM812", # Conflict with formatter
-    "CPY",    # No copyright statements
-    "D1",     # Docstrings should not be enforced by default
-    "D203",   # Choose D203 or D211
-    "D212",   # Choose D212 or D213
-    "S404",   # Uses of subprocess are rejected, no need to reject the imports as well
-    "T201",   # (project) Print is allowed
+    "COM812",  # Conflict with formatter
+    "CPY",     # No copyright statements
+    "D1",      # Docstrings should not be enforced by default
+    "D203",    # Choose D203 or D211
+    "D212",    # Choose D212 or D213
+    "PLW2901", # (project) Re-assignments are really convenient here
+    "S404",    # Uses of subprocess are rejected, no need to reject the imports as well
+    "T201",    # (project) Print is allowed
 ]
 
 lint.per-file-ignores."tests/**/*.py" = [

{docker_image_pin-0.1.1 → docker_image_pin-0.2.0}/src/docker_image_pin/__init__.py

@@ -27,7 +27,7 @@ def parse_args() -> Args:
     return parser.parse_args(namespace=Args())
 
 
-def main() -> int:
+def main() -> int:  # noqa: C901
     args = parse_args()
 
     retval = 0
@@ -41,10 +41,22 @@ def main() -> int:
         content = file.read_text()
 
         for line in content.splitlines():
-            line = line.strip()  # noqa: PLW2901
+            line = line.strip()
             if not line.startswith("image:"):
                 continue
-            line = line.removeprefix("image:").strip()  # noqa: PLW2901
+
+            if "#" in line:
+                line, comment = line.split("#")
+                line = line.strip()
+                comment = comment.strip()
+                if not comment.startswith("allow-"):
+                    invalid("comment on image did not start with 'allow-'")
+                    continue
+                allow = comment.removeprefix("allow-")
+            else:
+                allow = None
+
+            line = line.removeprefix("image:").strip()
             try:
                 rest, sha = line.split("@")
             except ValueError:
@@ -56,7 +68,7 @@ def main() -> int:
                 invalid("no ':' in leading part")
                 continue
 
-            if version in {"latest", "stable"}:
+            if version in {"latest", "stable"} and allow != version:
                 invalid(f"uses dynamic tag '{version}' instead of pinned version")
                 continue
 

{docker_image_pin-0.1.1 → docker_image_pin-0.2.0}/uv.lock

@@ -4,5 +4,5 @@ requires-python = ">=3.13"
 
 [[package]]
 name = "docker-image-pin"
-version = "0.1.1"
+version = "0.2.0"
 source = { editable = "." }