From b6614fba7f230cf5f32bd4a234f5295585950e8e Mon Sep 17 00:00:00 2001 From: Paul Burns Date: Fri, 7 Aug 2026 11:40:55 -0400 Subject: [PATCH] Remove stale README references to the deleted bootstrap script The bootstrap script (and the DOCKER_SOCK/.env mechanism it set up) was removed earlier; the README still told new clones to run it. Co-Authored-By: Claude Fable 5 --- README.md | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/README.md b/README.md index eea0f2c..f539744 100644 --- a/README.md +++ b/README.md @@ -7,7 +7,7 @@ Repository layout: - `Dockerfile` and `image/` — the tooling image definition and the files copied into it -- `scripts/` — scripts run on the host (`bootstrap.sh`, `build-image.sh`) +- `scripts/` — scripts run on the host (`build-image.sh`) - `compose.yaml` — containerized dev tooling (trivy, shellcheck, hadolint), so nothing needs to be installed on the host - `tool-versions.env` — single source of truth for the tool versions baked @@ -15,12 +15,7 @@ Repository layout: # Getting started -After cloning, run `./scripts/bootstrap.sh` once. It detects where your -Docker daemon socket lives (e.g. rootless Docker keeps it under -`/run/user/...`) and records it as `DOCKER_SOCK` in a local `.env` file, -which docker compose reads automatically. - -Building the image locally also requires a one-time `docker login dhi.io` +Building the image locally requires a one-time `docker login dhi.io` (your Docker Hub credentials work). The base image is Docker Hardened Images' `debian-base` (free Community tier), which requires authentication to pull. Its tag is rolling, so the Dockerfile pins it by digest and @@ -38,8 +33,7 @@ Run `./scripts/build-image.sh scan-local-beta` to scan a locally built beta image with [Trivy](https://trivy.dev), or `docker compose run --rm trivy image IMAGE` to scan any other image reference. Trivy runs from its official Docker image via the `trivy` service in `compose.yaml`, so no host install is -required. Scanning locally built images relies on the `DOCKER_SOCK` value that -`./scripts/bootstrap.sh` writes to `.env`. +required. Scan behaviour is controlled with environment variables, with defaults set in `compose.yaml`: `TRIVY_SEVERITY` (default `HIGH,CRITICAL`), `TRIVY_EXIT_CODE`