From 5cb9a19494502a5ab777aaba4152d644d45a1457 Mon Sep 17 00:00:00 2001
From: Markus Waldheim <mawa@if.de>
Date: Mon, 6 Jul 2026 10:26:28 +0200
Subject: [PATCH] fix(dockerfile): remove hardcoded repo-specific OCI labels
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

sync-template.yml only substitutes the 'plugin-template Authors' line in
Dockerfile when propagating it to plugin repos (line 100 sed) — it does
NOT rewrite org.opencontainers.image.title/description/source. The LABEL
block added in the subprocess-model migration got hardcoded to
'plugin-template' values and was blindly synced verbatim into ~19 plugin
repos via chore/sync-template-* PRs, corrupting their Dockerfile OCI
labels. Removing the LABEL block from the template avoids this; each
plugin already sets its own correct labels independently.
---
 Dockerfile | 19 ++++++-------------
 1 file changed, 6 insertions(+), 13 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 1cae47f..4463562 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -19,19 +19,12 @@ RUN CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH} \
 # ── distroless release image ───────────────────────────────────────────────────
 FROM gcr.io/distroless/static-debian12:nonroot
 
-ARG VERSION=dev
-ARG BUILD_DATE
-ARG VCS_REF
-
-LABEL org.opencontainers.image.title="semrel-plugin-plugin-template" \
-      org.opencontainers.image.description="semrel plugin template subprocess example" \
-      org.opencontainers.image.url="https://semrel.io" \
-      org.opencontainers.image.source="https://github.com/SemRels/plugin-template" \
-      org.opencontainers.image.version="${VERSION}" \
-      org.opencontainers.image.created="${BUILD_DATE}" \
-      org.opencontainers.image.revision="${VCS_REF}" \
-      org.opencontainers.image.licenses="Apache-2.0" \
-      org.opencontainers.image.vendor="SemRels"
+# NOTE: intentionally no repo-specific `org.opencontainers.image.*` LABEL block
+# here. sync-template.yml only substitutes the "plugin-template Authors" line
+# in this file when propagating it to plugin repos (see `sed` step) — it does
+# NOT rewrite LABEL title/description/source values. Adding those here would
+# get copied verbatim (and wrongly) into every plugin's Dockerfile. Add labels
+# in each plugin's own Dockerfile after copying this template, not here.
 
 COPY --from=build /out/plugin /usr/local/bin/plugin
 USER nonroot