fix(ci): harden public image build workflow by POWERFULMOVES · Pull Request #1252 · POWERFULMOVES/PMOVES.AI

POWERFULMOVES · 2026-04-15T11:35:10Z

Summary

move public PR image validation for integrations-ghcr.yml onto GitHub-hosted runners
keep privileged publish/sign/push steps on trusted self-hosted push and manual runs only
pin third-party actions by full commit SHA in the touched workflows and refresh Docker hardening guidance away from Docker Content Trust toward digest + cosign provenance

Why

The repo is public, and the previous GHCR workflow combined pull_request handling with generic self-hosted runners plus publish-oriented permissions and auth setup. This splits the trust boundary so untrusted PR builds stay read-only and GitHub-hosted.

Validation

git diff --check
YAML parse check for .github/workflows/integrations-ghcr.yml
YAML parse check for .github/workflows/hardening-validation.yml

Notes

I reviewed open PRs before cutting this lane; none of the live open PRs owned integrations-ghcr.yml, DOCKER_DAEMON_HARDENING.md, or Dockerfile.multiarch, so this is intentionally a dedicated follow-up.
I did not fold the deeper Dockerfile hardened-base migration into this PR. That should stay a separate image-by-image lane.

Summary by CodeRabbit

Documentation
- Updated Docker daemon hardening guidance to emphasize digest-based image pinning and Sigstore verification over legacy content trust methods.
- Added best practices for runner configuration and security across CI environments.
Chores
- Enhanced CI/CD pipeline security through stricter action dependency pinning.
- Improved Docker build validation and automated image signing processes.

github-actions · 2026-04-15T11:35:37Z

Docker Hardening Validation

Hardening Validation Report

Validated: Wed Apr 15 11:35:35 UTC 2026

Services Checked

PMOVES.AI Docker Hardening Validation

[INFO] Checking: pmoves/docker-compose.hardened.yml

[INFO] Validating: hi-rag-gateway-v2
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: extract-worker
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: langextract
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: presign
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: render-webhook
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: retrieval-eval
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: pdf-ingest
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: jellyfin-bridge
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: invidious-companion-proxy
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: ffmpeg-whisper
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: media-video
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: media-audio
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: hi-rag-gateway-v2-gpu
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: hi-rag-gateway-gpu
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: deepresearch
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: supaserch
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: publisher-discord
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: mesh-agent
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: nats-echo-req
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: nats-echo-res
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: publisher
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: analysis-echo
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: graph-linker
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: comfy-watcher
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: grayjay-plugin-host
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: agent-zero
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: archon
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: channel-monitor
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: pmoves-yt
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: notebook-sync
[PASS] Non-root user: 65532:65532
[PASS] Read-only filesystem
[PASS] All capabilities dropped
[PASS] No-new-privileges enabled
[WARN] No resource limits

[INFO] Validating: supabase_service_role_key
[WARN] No user directive
[WARN] No read_only directive
[WARN] No cap_drop: ["ALL"]
[WARN] No no-new-privileges
[WARN] No resource limits

[INFO] Validating: supabase_jwt_secret
[WARN] No user directive
[WARN] No read_only directive
[WARN] No cap_drop: ["ALL"]
[WARN] No no-new-privileges
[WARN] No resource limits

======================================
Summary: 120 passed, 40 warnings, 0 errors

coderabbitai · 2026-04-15T14:18:11Z

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 6dd98ec6-0672-42f3-96de-ded065359f2b

📥 Commits

Reviewing files that changed from the base of the PR and between 505078f and 2cc117f.

⛔ Files ignored due to path filters (1)

pmoves/services/agent-zero/requirements.lock is excluded by !**/*.lock

📒 Files selected for processing (4)

.github/workflows/hardening-validation.yml
.github/workflows/integrations-ghcr.matrix.json
.github/workflows/integrations-ghcr.yml
pmoves/docs/operations/DOCKER_DAEMON_HARDENING.md

📝 Walkthrough

Walkthrough

The changes update CI/CD workflows and documentation to transition from Docker Content Trust enforcement to digest-pinned image provenance verification using Sigstore/cosign. GitHub Actions are pinned to specific commit SHAs across workflows. A new PR validation job is introduced to the integration workflow, separating untrusted PR builds from trusted publish flows. The docker-bench validation job environment is simplified from self-hosted to ubuntu-latest with updated security checks. Documentation shifts from Content Trust guidance to digest-pinning and hardened-base practices.

Changes

Cohort / File(s)	Summary
Workflow Action Pinning `.github/workflows/hardening-validation.yml`, `.github/workflows/integrations-ghcr.yml`	Third-party GitHub Actions pinned to fixed commit SHAs (e.g., `step-security/harden-runner`, `actions/checkout`, `docker/*`, `sigstore/cosign-installer`, `actions/upload-artifact`, etc.) instead of floating major version tags.
Integration Build Flow Restructuring `.github/workflows/integrations-ghcr.yml`	New `build-validate-pr` job for pull request validation with matrix-driven per-integration config loading, source preparation, and docker build (no push); `build-publish` job now runs only on non-PR events; removed inline PR validation from publish job.
Docker Daemon Hardening Validation `.github/workflows/hardening-validation.yml`	`docker-bench` job switched from self-hosted runner to `ubuntu-latest`; removed content trust detection and `DOCKER_CONTENT_TRUST` environment variable; added rootless/user-namespace isolation checks via `docker info` security options; updated output labels and completion messaging.
Integration Build Context `.github/workflows/integrations-ghcr.matrix.json`	Updated `supaserch` Git context path from `pmoves/services` to `pmoves` for build context directory.
Docker Daemon Hardening Documentation `pmoves/docs/operations/DOCKER_DAEMON_HARDENING.md`	Removed Content Trust enforcement instructions; added guidance for digest-pinned image references, Sigstore/cosign verification, and Docker Hardened Images adoption; updated CI runner security recommendations (untrusted PR on GitHub-hosted, trusted operations on self-hosted) and reference links.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

Possibly related PRs

chore(docker): pin base image digests for reproducible builds #799: Updates CI/workflows and documentation to recommend and enforce image digest pinning and provenance with sigstore/cosign, directly supporting the image security verification changes in this PR.
fix(ci): prevent runner starvation with timeouts and DinD detection #885: Modifies the same hardening-validation.yml docker-bench step, altering runtime host checks and detection logic in parallel.
fix(ci): unblock integrations GHCR + lockfile builds #312: Modifies the integrations GHCR workflow matrix and CI action versions, overlapping with the SupaSerch build context and action pinning changes.

Poem

🐰 Workflows now pinned, no more drifting about,
Digests verify what each image brings out,
PR builds on GitHub, push builds on our host,
Cosign signs the good ones—we trust provenance most! ✨

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch codex/gh-self-hosted-hardening

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

github-actions · 2026-04-15T14:18:42Z

Docker Hardening Validation

Hardening Validation Report

Validated: Wed Apr 15 14:18:40 UTC 2026