Build full package in Dockerfile to include all commands (#1844) · github/github-mcp-server@fc079ee · GitHub
Skip to content

Commit fc079ee

Browse files
Build full package in Dockerfile to include all commands (#1844)
* Pin go-licenses to v2.0.1 for reproducible builds Fixes code scanning alerts #10 and #11 by removing the @latest version for local development and using the pinned v2.0.1 version consistently across all environments. This ensures deterministic builds and addresses the CWE-494 'Download of Code Without Integrity Check' security concern. * Build full package in Dockerfile to include all commands
1 parent e81f120 commit fc079ee

2 files changed

Lines changed: 3 additions & 7 deletions

File tree

‎Dockerfile‎

Lines changed: 1 addition & 1 deletion

‎script/licenses‎

Lines changed: 2 additions & 6 deletions

0 commit comments

Comments
 (0)