Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
FROM php:8.1.34-alpine
# Pin 8.2.35 once Docker Hub publishes php:8.2.35-cli-alpine (CVE-2026-109618/109619).
# Official library CI already built 8.2.35 (docker-library/php run 39615869747); Hub lag.
FROM php:8.2-alpine

ARG PHP_CS_FIXER_VERSION=3.13.0
ARG PHP_CS_FIXER_SHA256=ac2e57e32cdae67f21baa88f78405f93d4d6e928f41ba62dc91505565c785a44
Expand Down
6 changes: 6 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,12 @@ docker run --rm -v "$PWD:/app" -w /app ghcr.io/mobsuccess-devops/github-actions-

## Image

Base runtime: PHP 8.2 Alpine (`php:8.2-alpine`; pin `php:8.2.35-cli-alpine`
when Docker Hub publishes the CVE-patched tag). PHP-CS-Fixer stays at
**3.13.0** (same rules as today); `PHP_CS_FIXER_IGNORE_ENV=1` is set in the
entrypoint so 3.13.0 can run on PHP 8.2. Bumping Fixer to ≥3.15.0 (official
8.2 support) is a separate change — it can reformat consumer repos.

A push to `master` that changes the `Dockerfile` or `entrypoint.sh` publishes
the image to `ghcr.io/mobsuccess-devops/github-actions-php-cs-fixer`
(`.github/workflows/docker.yml`), tagged with the PHP-CS-Fixer version. The
Expand Down
5 changes: 5 additions & 0 deletions entrypoint.sh
Original file line number Diff line number Diff line change
Expand Up @@ -2,5 +2,10 @@

set -e

# PHP-CS-Fixer 3.13.0 declares max PHP 8.1.*; we run on 8.2 for parity with
# app images. Official 8.2 support starts at Fixer 3.15.0 (ruleset bump — do
# separately). Until then, allow the runtime so dry-run CI can execute.
export PHP_CS_FIXER_IGNORE_ENV=1

/usr/local/bin/php-cs-fixer --version
/usr/local/bin/php-cs-fixer fix $*
Loading