Makefile:
- dry-run target (default) shows registry, branch, SHA, version, all computed
image tags, and build args — no side effects
- build/push/release targets wire docker build and docker push
- Branch-aware tag strategy:
main → <version> + latest
develop → <version>-dev-<short-sha>
release/* → <version>-qa-<short-sha>
- Version resolved from the highest semver tag at HEAD; falls back to the most
recent reachable tag via git describe
- BASE_DIGEST resolved at build time from the local Docker daemon; dry-run
prints a hint when the base image is not yet pulled
- Note: case/esac cannot be used inside $(shell) — Make's parser matches the
pattern ")" as the function's closing paren before the shell sees it;
if/elif/else/fi used instead
Dockerfile:
- OCI standard labels added to the final stage via build args (VERSION, GIT_SHA,
BASE_DIGEST):
org.opencontainers.image.source — repo URL
org.opencontainers.image.version — semver tag
org.opencontainers.image.revision — git commit SHA
org.opencontainers.image.base.name — alpine:3.21
org.opencontainers.image.base.digest — digest of base image at build time
- Custom label:
dev.nochebuena.healthz — /health
