Skip to content

Update mcr.microsoft.com/vscode/devcontainers/universal:2-linux Docker digest to dca6a98 #2602

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update mcr.microsoft.com/vscode/devcontainers/universal:2-linux Docker digest to dca6a98 #2602

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .devcontainer/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,6 @@

# To fully customize the contents of this image, use the following Dockerfile instead:
# https://github.com/microsoft/vscode-dev-containers/tree/v0.128.0/containers/codespaces-linux/.devcontainer/Dockerfile
FROM mcr.microsoft.com/vscode/devcontainers/universal:2-linux@sha256:4da8fdd5ce2815ba943d9df53829d00aab20304ab93caad741874e135d56b026
FROM mcr.microsoft.com/vscode/devcontainers/universal:2-linux@sha256:dca6a985ffbbc74007a13b6f56ac0fbbc5febae081350b66e865a5549338134b

RUN curl -fsSL https://dotnet.microsoft.com/download/dotnet-core/scripts/v1/dotnet-install.sh | sudo bash -s -- --channel Current --install-dir /home/codespace/.dotnet/

@codacy-production codacy-production Bot Jun 23, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔴 HIGH RISK

This instruction is prone to silent failures and security/permission issues. Piped commands in Docker ignore the exit status of earlier commands (like curl) unless pipefail is set, potentially resulting in a broken image that reports a successful build. Additionally, sudo is unnecessary and discouraged in Dockerfiles; the container should either run as root (via the USER instruction) or have direct ownership of the destination directory (/home/codespace/.dotnet/).\n\nTry running the following prompt in your IDE agent:\n> In .devcontainer/Dockerfile, add 'SHELL ["/bin/bash", "-o", "pipefail", "-c"]' before line 10. Then, remove 'sudo' from the command on line 10 to follow Docker best practices for reliability and security.

Loading