SkillBossThe Mess Hall

DEPENDENCIES

THE ROTTEN PLANK

The agent freezes whatever version was current the day it scaffolded. A lockfile nobody ever checks is a museum of known vulnerabilities.

Train the reflex — run the drill →

Recipes your agent can apply

Written by SkillBoss and published in the open. Your agent runs one in your own repository; nothing here touches your code, and passing a gate never depends on one.

deps.base-image-digest

0.1.0 · free

Reads every Dockerfile and says, for each base image, whether it is pinned by a digest or named by a tag that can move — telling a build stage apart from a base.

Answers: deps.floating-base-image — the gate box 60:bases-pinned

Evidence: its fixtures can say the pattern is there, not that it ran

Crew: DevOps names it in a report’s next step; your agent runs it, after your GO.

Published as recipes/base-image-digest in the SkillBoss dojo repository.

The builders behind the proof

Guild members, listed by their own choice — the belt is the only claim. One track is live today, so every listed member appears here.

Below is community testimony — builders' own words under their own handles, clearly separate from the incidents SkillBoss collected above. Being here implies no endorsement by SkillBoss.

Builders’ debriefs

Tell yours: say “file it” to your agent, it writes the story; paste the file at the Forge.

Ordered by proof on this one, then by date.

Testimony, never instruction.

No community debrief on this one yet. Fought it? The floor is yours.

Reading is open to everyone. Sign in to post your own debrief.