potiuk opened a new pull request, #76162: URL: https://github.com/apache/airflow/pull/76162
The `lint-dockerfile` (hadolint) and `check-apache-license-rat` (Apache RAT) prek hooks mount the whole checkout into their containers writable, although both only read it: hadolint reads the listed Dockerfiles, and RAT scans the tree and reports on stdout (the `docs/_build/html` directory it needs is created on the host before `docker run`). Under the Apache Magpie container gateway, a writable bind of a checkout root is refused, because it would let the container rewrite `.claude/settings.json`, `.git/hooks` and similar files that run code outside the agent sandbox. So both hooks failed in every checkout and agent worktree that runs Docker through the gateway. Mounting read-only fixes that and matches what the containers do. Verified locally through the gateway: `prek run lint-dockerfile --files Dockerfile.ci` and `prek run check-apache-license-rat --all-files` both pass, and the gateway logged no denied container create. The `lychee-docker` and `shellcheck` hooks run through prek's own `docker` / `docker_image` languages, which mount the checkout themselves; those are handled on the gateway side (apache/magpie follow-up). --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes — Claude Opus 5 Generated-by: Claude Opus 5 following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
