Skip to content

Remove unused GITHUB_TOKEN build argument from Dockerfiles#66

Merged
t0mdavid-m merged 1 commit into
developfrom
claude/update-repo-docs-GSnc8
May 19, 2026
Merged

Remove unused GITHUB_TOKEN build argument from Dockerfiles#66
t0mdavid-m merged 1 commit into
developfrom
claude/update-repo-docs-GSnc8

Conversation

@t0mdavid-m
Copy link
Copy Markdown
Member

@t0mdavid-m t0mdavid-m commented May 19, 2026

Summary

Removes the unused GITHUB_TOKEN build argument from both Dockerfile and Dockerfile.arm. This argument was declared but never referenced in the build process.

Changes

  • Removed ARG GITHUB_TOKEN declaration and its associated comment from Dockerfile
  • Removed ARG GITHUB_TOKEN declaration and its associated comment from Dockerfile.arm

Details

The GITHUB_TOKEN argument was previously documented as being used "to download latest OpenMS executable for Windows from Github action artifact," but this functionality is not actually utilized in the current Docker build configuration. The GITHUB_USER and GITHUB_REPO arguments remain, as they are still in use for artifact downloads.

This cleanup reduces unnecessary build arguments and potential security concerns around token handling in Docker builds.

https://claude.ai/code/session_015kE3xopcwc6muQr9dfrLtY

Summary by CodeRabbit

Chores

  • Updated Docker build configuration to support configurable OpenMS source repository, branch, and container port settings.

Review Change Stack

The setup-build-system stage declared ARG GITHUB_TOKEN at the top, even
though the token is only used in run-app (gh release download). Since CI
passes a per-run secrets.GITHUB_TOKEN via --build-arg and that value
changes every workflow run, the ARG invalidated every layer downstream
in setup-build-system and compile-openms — apt-get update and all
package installs re-ran from scratch on every PR/push.

This is the same fix as 859e481 ("fix(docker): stop cache-busting on
GITHUB_TOKEN"); the merge in a723fb5 left both copies of the ARG in
place (the redundant one at line 34 and the one actually needed in
run-app at line 217). Keep only the run-app declaration.

Applies to both Dockerfile and Dockerfile.arm.
@t0mdavid-m t0mdavid-m merged commit 1e5eba5 into develop May 19, 2026
3 of 4 checks passed
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented May 19, 2026

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: db0dfad4-11be-41b7-a726-c39b0a668652

📥 Commits

Reviewing files that changed from the base of the PR and between 7d4e58b and 625d2c0.

📒 Files selected for processing (2)
  • Dockerfile
  • Dockerfile.arm

📝 Walkthrough

Walkthrough

Build arguments across Docker stages are reorganized to improve configuration scoping. The main Dockerfile adds OpenMS repository, branch, and port configuration arguments to the setup-build-system stage, while removing GITHUB_TOKEN from that stage where it is unused. Dockerfile.arm removes the same token argument from setup-build-system. The token is redeclared only in the run-app stage where it is consumed.

Changes

Docker Build Configuration

Layer / File(s) Summary
Dockerfile build argument refactoring
Dockerfile
The setup-build-system stage adds build arguments for OPENMS_REPO, OPENMS_BRANCH, and default PORT=8501, and removes the unused GITHUB_TOKEN declaration (which is redeclared in the run-app stage where it is needed).
Dockerfile.arm build argument cleanup
Dockerfile.arm
The setup-build-system stage removes the GITHUB_TOKEN argument declaration, narrowing its scope to stages that actually consume it.

Possibly related PRs

  • OpenMS/FLASHApp#65: Similar Docker build argument refactoring to remove GITHUB_TOKEN from the setup-build-system stage and redeclare it only in stages where the token is used for GitHub operations.

Poem

🐰 Tokens scattered far and wide,
Now bundled where they're needed inside,
Build stages clean, their scopes refined—
A Docker dance, perfectly aligned! 🎯

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch claude/update-repo-docs-GSnc8

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants