docker-image-pin 0.1.1__tar.gz → 0.3.0__tar.gz

{docker_image_pin-0.1.1 → docker_image_pin-0.3.0}/.pre-commit-config.yaml

@@ -47,7 +47,7 @@ repos:
         args: [ "--write-changes" ]
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.12.4
+    rev: v0.12.5
     hooks:
       - id: ruff-check
         args: [ "--fix" ]
@@ -75,7 +75,7 @@ repos:
         args: ["--verbose"]
 
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 41.40.0
+    rev: 41.43.0
     hooks:
       - id: renovate-config-validator
         args: [--strict]

{docker_image_pin-0.1.1 → docker_image_pin-0.3.0}/.pre-commit-hooks.yaml

@@ -1,7 +1,7 @@
 -   id: docker-image-pin
     name: docker-image-pin
-    description: Checks if Docker images are properly pinned in docker-compose.yml files
+    description: Checks if Docker images are properly pinned in docker-compose.yml and Dockerfile files
     entry: docker-image-pin
     language: python
     types: [yaml]
-    files: docker-compose\.ya?ml$
+    files: docker-compose\.ya?ml$|Dockerfile$

{docker_image_pin-0.1.1 → docker_image_pin-0.3.0}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: docker-image-pin
-Version: 0.1.1
-Summary: Checks if Docker images are properly pinned in docker-compose.yml files
+Version: 0.3.0
+Summary: Checks if Docker images are properly pinned in docker-compose.yml and Dockerfile files
 Project-URL: bugs, https://github.com/GideonBear/docker-image-pin/issues
 Project-URL: homepage, https://github.com/GideonBear/docker-image-pin
 Author: GideonBear

{docker_image_pin-0.1.1 → docker_image_pin-0.3.0}/pyproject.toml

@@ -4,8 +4,8 @@ requires = [ "hatchling" ]
 
 [project]
 name = "docker-image-pin"
-version = "0.1.1"
-description = "Checks if Docker images are properly pinned in docker-compose.yml files"
+version = "0.3.0"
+description = "Checks if Docker images are properly pinned in docker-compose.yml and Dockerfile files"
 readme = "README.md"
 license = "GPL-3.0-only"
 authors = [
@@ -28,13 +28,14 @@ scripts.docker-image-pin = "docker_image_pin:main"
 lint.select = [ "ALL" ]
 
 lint.ignore = [
-    "COM812", # Conflict with formatter
-    "CPY",    # No copyright statements
-    "D1",     # Docstrings should not be enforced by default
-    "D203",   # Choose D203 or D211
-    "D212",   # Choose D212 or D213
-    "S404",   # Uses of subprocess are rejected, no need to reject the imports as well
-    "T201",   # (project) Print is allowed
+    "COM812",  # Conflict with formatter
+    "CPY",     # No copyright statements
+    "D1",      # Docstrings should not be enforced by default
+    "D203",    # Choose D203 or D211
+    "D212",    # Choose D212 or D213
+    "PLW2901", # (project) Re-assignments are really convenient here
+    "S404",    # Uses of subprocess are rejected, no need to reject the imports as well
+    "T201",    # (project) Print is allowed
 ]
 
 lint.per-file-ignores."tests/**/*.py" = [

{docker_image_pin-0.1.1 → docker_image_pin-0.3.0}/src/docker_image_pin/__init__.py

@@ -27,7 +27,7 @@ def parse_args() -> Args:
     return parser.parse_args(namespace=Args())
 
 
-def main() -> int:
+def main() -> int:  # noqa: C901
     args = parse_args()
 
     retval = 0
@@ -41,10 +41,23 @@ def main() -> int:
         content = file.read_text()
 
         for line in content.splitlines():
-            line = line.strip()  # noqa: PLW2901
-            if not line.startswith("image:"):
+            line = line.strip()
+            if not (line.startswith(("image:", "FROM"))):
                 continue
-            line = line.removeprefix("image:").strip()  # noqa: PLW2901
+
+            if "#" in line:
+                line, comment = line.split("#")
+                line = line.strip()
+                comment = comment.strip()
+                if not comment.startswith("allow-"):
+                    invalid("comment on image did not start with 'allow-'")
+                    continue
+                allow = comment.removeprefix("allow-")
+            else:
+                allow = None
+
+            line = line.removeprefix("image:").strip()
+            line = line.removeprefix("FROM").strip()
             try:
                 rest, sha = line.split("@")
             except ValueError:
@@ -56,7 +69,7 @@ def main() -> int:
                 invalid("no ':' in leading part")
                 continue
 
-            if version in {"latest", "stable"}:
+            if version in {"latest", "stable"} and allow != version:
                 invalid(f"uses dynamic tag '{version}' instead of pinned version")
                 continue
 

{docker_image_pin-0.1.1 → docker_image_pin-0.3.0}/uv.lock

@@ -1,8 +1,8 @@
 version = 1
-revision = 2
+revision = 3
 requires-python = ">=3.13"
 
 [[package]]
 name = "docker-image-pin"
-version = "0.1.1"
+version = "0.3.0"
 source = { editable = "." }