sec: migrate standard Dockerfiles to Chainguard golden base images#159

Merged

scale-ballen merged 10 commits intomainfrom

sec/golden-standard-dockerfiles

Mar 12, 2026

Commits on Mar 11, 2026

sec: migrate standard Dockerfiles to Chainguard golden base images

scale-ballen
and
claude
committed
fix: address Greptile review findings in agentex Dockerfile

scale-ballen
and
claude
committed
fix: use BASE_IMAGE arg to allow CI/local dev without ECR auth

scale-ballen
and
claude
committed
fix: add ECR auth to integration tests for golden base images

scale-ballen
and
claude
committed
fix: use uv sync instead of uv pip install for dependency groups

scale-ballen
and
claude
committed
sec: use minimal ECR read-only role for golden image pulls

scale-ballen
and
claude
committed