Feature/docker ci cd

[NadeeshaMedagama]

Fixes #

Proposed Changes

[Copilot]

Pull request overview

This PR introduces Docker-based CI/CD support for cri-dockerd, adding Dockerfiles for building/testing, a reusable GitHub Actions workflow for Docker test/build/push, and wiring that workflow into the existing PR, Merge, and Release pipelines.

Changes:

• Added Dockerfile (multi-stage: builder → test → runtime) and Dockerfile.test for containerized unit testing
• Added .github/workflows/docker.yml as a reusable workflow that runs unit tests in Docker and then builds/pushes a multi-arch image to Docker Hub
• Integrated the new docker.yml workflow into PR.yml, Merge.yml, and Release.yml, with a .dockerignore to trim the build context

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
Dockerfile	Multi-stage build: Go builder, unused test stage, and debian-slim runtime
Dockerfile.test	Standalone Dockerfile for running unit tests in CI
.dockerignore	Reduces build context by excluding non-source files
.github/workflows/docker.yml	Reusable workflow: tests via Dockerfile.test, then builds & pushes multi-arch image
.github/workflows/PR.yml	Adds docker job call, gated on build/vet/unit-test success
.github/workflows/Merge.yml	Adds docker job call, gated on build/vet/unit-test success
.github/workflows/Release.yml	Adds docker job call, gated on all pre-release tests

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The "Print image digest" step incorrectly references steps.docker_meta.outputs.digest. The docker_meta step id refers to the docker/metadata-action@v5 step, which does not produce a digest output. The image digest is an output of the docker/build-push-action@v6 "Build and push" step. To fix this, add an id (e.g., id: build) to the "Build and push" step and then reference it as steps.build.outputs.digest.

[Copilot]

The docker-build-push job unconditionally sets push: true, which means it will push an image to Docker Hub on every PR event (since docker.yml is also called from PR.yml). This is likely unintended — PR builds should not publish images to the public registry. Consider conditionally setting push based on the GitHub event type, for example by adding push: ${{ github.event_name != 'pull_request' }}.

Suggested change

	push: true
	push: ${{ github.event_name != 'pull_request' }}

[Copilot]

The "Test Stage" (FROM builder AS test) defined in Dockerfile is never actually used. The CI pipeline runs tests via Dockerfile.test in the docker-test job, and the docker-build-push job builds only the final runtime stage. If the intent is to run tests as part of the main Docker build, then the workflow should add a --target test step; otherwise this stage is unused dead code and should be removed to avoid confusion.

Suggested change

	# ---- Test Stage ----
	FROM builder AS test
	RUN go test ./...

[Copilot]

The VERSION detection logic is broken when no git tags exist. The command git describe --tags 2>/dev/null | sed 's/^v//' || echo "dev" evaluates the exit code of sed (the last command in the pipe), not git describe. Since sed always succeeds even on empty input, || echo "dev" is never reached, and VERSION will be an empty string instead of "dev" when no tags exist. To fix this, either capture git describe output in a variable first (e.g., VERSION=$(git describe --tags 2>/dev/null) && VERSION=${VERSION#v} || VERSION=dev) or use set -o pipefail at the start of the run block.

Suggested change

	VERSION=$(git describe --tags 2>/dev/null | sed 's/^v//' || echo "dev")
	VERSION=$(git describe --tags 2>/dev/null) && VERSION=${VERSION#v} || VERSION=dev

[Copilot]

The vendor/ directory is not excluded from the Docker build context in .dockerignore. Since the Dockerfiles use go mod download to fetch dependencies, the vendor/ directory is not needed and unnecessarily inflates the build context. Adding vendor/ to .dockerignore would speed up Docker builds significantly.