From 1c7cc8aa298edaf1d03d9a156416e38dea332a52 Mon Sep 17 00:00:00 2001
From: ZdenekSrotyr <zdenek.srotyr@keboola.com>
Date: Tue, 21 Apr 2026 21:00:30 +0200
Subject: [PATCH] fix(image): add AGNES_COMMIT_SHA build-arg to Dockerfile +
 release.yml
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Completes the previous commit — bakes the full git SHA into the image ENV
at build time so the UI badge shows a real commit, not a sha256 digest
(which was the floating manifest digest and unhelpful for debugging).
---
 .github/workflows/release.yml | 1 +
 Dockerfile                    | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6b1bfb5..199c3d7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -115,6 +115,7 @@ jobs:
           build-args: |
             AGNES_VERSION=${{ steps.meta.outputs.version }}
             RELEASE_CHANNEL=${{ steps.meta.outputs.channel }}
+            AGNES_COMMIT_SHA=${{ github.sha }}
           tags: |
             ghcr.io/${{ github.repository }}:${{ steps.meta.outputs.channel }}
             ghcr.io/${{ github.repository }}:${{ steps.meta.outputs.versioned_tag }}
diff --git a/Dockerfile b/Dockerfile
index 6cdbaa5..977204b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,8 +8,10 @@ COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv
 
 ARG AGNES_VERSION=dev
 ARG RELEASE_CHANNEL=dev
+ARG AGNES_COMMIT_SHA=unknown
 ENV AGNES_VERSION=${AGNES_VERSION}
 ENV RELEASE_CHANNEL=${RELEASE_CHANNEL}
+ENV AGNES_COMMIT_SHA=${AGNES_COMMIT_SHA}
 
 WORKDIR /app