ci: deterministic capnp codegen via pinned Docker image + drift check#132

Merged

DZakh merged 7 commits into

mainfrom

claude/adoring-dijkstra-o4A0z

Jun 9, 2026

Commits on Jun 9, 2026

ci: guard committed capnp code against schema drift

DZakh
and
claude
committed
ci: drop internal-implementation comments from capnp job

DZakh
and
claude
committed
ci: generate capnp code in a pinned Docker image for determinism

DZakh
and
claude
committed
ci: pin capnp codegen base image by digest

DZakh
and
claude
committed
ci: generate capnp code in one docker build, on capnp 1.1.0

DZakh
and
claude
committed
ci: least-privilege token and document .dockerignore

DZakh
and
claude
committed
ci: verify pinned capnpc matches the capnp dependency

DZakh
and
claude
committed