Skip to content

LCORE-1356: Hermetic build demo slides#1331

Merged
tisnik merged 1 commit into
lightspeed-core:mainfrom
tisnik:hermetic_build_demo_slides
Mar 17, 2026
Merged

LCORE-1356: Hermetic build demo slides#1331
tisnik merged 1 commit into
lightspeed-core:mainfrom
tisnik:hermetic_build_demo_slides

Conversation

@tisnik

@tisnik tisnik commented Mar 17, 2026

Copy link
Copy Markdown
Contributor

Description

Hermetic build demo slides

Type of change

  • Refactor
  • New feature
  • Bug fix
  • CVE fix
  • Optimization
  • Documentation Update
  • Configuration Update
  • Bump-up service version
  • Bump-up dependent library
  • Bump-up library or tool used for development (does not change the final image)
  • CI configuration change
  • Konflux configuration change
  • Unit tests improvement
  • Integration tests improvement
  • End to end tests improvement
  • Benchmarks improvement

Tools used to create PR

  • Assisted-by: N/A
  • Generated by: N/A

Related Tickets & Documents

  • Related Issue #LCORE-1356

Summary by CodeRabbit

  • Documentation
    • Added a new interactive presentation on hermetic build approaches for CVE remediation.
    • Included comprehensive documentation covering build processes, package categories, proposed solutions, and CVE fix procedures with estimated remediation timelines.

@coderabbitai

coderabbitai Bot commented Mar 17, 2026

Copy link
Copy Markdown
Contributor

Walkthrough

Two new files are added to establish a Reveal.js presentation for Lightspeed Core's hermetic build approach. The HTML file provides the presentation structure and framework initialization, while the markdown file contains the slide content covering hermetic build processes, package types, CVE fix procedures, and proposed solutions.

Changes

Cohort / File(s) Summary
Hermetic Build Presentation
docs/demos/lcore/cve_hermetic_build.html, docs/demos/lcore/cve_hermetic_build.md
New Reveal.js presentation setup with HTML shell and markdown content describing hermetic builds for CVE fixes, including build process, package categorization, and RH solutions.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately and clearly summarizes the main change: adding demo slides about hermetic builds for the LCORE project.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
📝 Coding Plan
  • Generate coding plan for human review comments

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 4

🧹 Nitpick comments (1)
docs/demos/lcore/cve_hermetic_build.html (1)

2-2: Add document language for better screen-reader support.

Add lang on the root <html> element.

Suggested fix
-<html>
+<html lang="en">
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/demos/lcore/cve_hermetic_build.html` at line 2, Add a lang attribute to
the root HTML element (<html>) in the document to improve
accessibility/screen-reader support; locate the root <html> tag in the file (the
element shown as <html>) and update it to include an appropriate language code
(e.g., lang="en" or the document's actual language).
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@docs/demos/lcore/cve_hermetic_build.html`:
- Line 5: Update the viewport meta tag to allow user zoom by removing the
user-scalable=no directive (e.g., adjust the existing meta viewport tag used in
the page). Locate the meta viewport element (the <meta name="viewport" ...> tag)
and either remove the user-scalable parameter or set it to allow scaling so zoom
is not disabled for accessibility.

In `@docs/demos/lcore/cve_hermetic_build.md`:
- Line 26: The phrase "time consuming build" in the bullet item should be
corrected to the hyphenated compound adjective "time-consuming build"; locate
the text "time consuming build" in the docs/demos/lcore/cve_hermetic_build.md
bullet and replace it with "time-consuming build" to improve clarity.
- Line 41: Replace the incorrect capitalization "PyPi" with the standard "PyPI"
in the markdown text; specifically update the bullet text "* Package in PyPi?"
to "* Package in PyPI?" so the package index name is correctly capitalized.
- Around line 47-50: Replace the informal/ambiguous phrases in the slide text —
specifically the "days (!!!)" ETA and "dunno ATM :(" pip package note — with
neutral, professional status wording; for example change the ETA to "ETA: TBD"
or "ETA: pending" and change the pip package line to "pip package: pending/under
investigation" (or "TBD") so the external-facing slides use precise, neutral
language.

---

Nitpick comments:
In `@docs/demos/lcore/cve_hermetic_build.html`:
- Line 2: Add a lang attribute to the root HTML element (<html>) in the document
to improve accessibility/screen-reader support; locate the root <html> tag in
the file (the element shown as <html>) and update it to include an appropriate
language code (e.g., lang="en" or the document's actual language).

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 82516ead-7423-4282-9864-5407e588e76f

📥 Commits

Reviewing files that changed from the base of the PR and between b2f54cf and 5e0d8cf.

📒 Files selected for processing (2)
  • docs/demos/lcore/cve_hermetic_build.html
  • docs/demos/lcore/cve_hermetic_build.md

<html>
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Remove user-scalable=no to avoid blocking zoom accessibility.

Line 5 disables user zoom, which is an accessibility blocker in browser/mobile contexts.

Suggested fix
-        <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
+        <meta name="viewport" content="width=device-width, initial-scale=1.0">
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/demos/lcore/cve_hermetic_build.html` at line 5, Update the viewport meta
tag to allow user zoom by removing the user-scalable=no directive (e.g., adjust
the existing meta viewport tag used in the page). Locate the meta viewport
element (the <meta name="viewport" ...> tag) and either remove the user-scalable
parameter or set it to allow scaling so zoom is not disabled for accessibility.

## Types of packages

* With sources (sdist)
* With sources, but with time consuming build

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Hyphenate compound adjective for clarity.

Line 26 should use “time-consuming build”.

🧰 Tools
🪛 LanguageTool

[grammar] ~26-~26: Use a hyphen to join words.
Context: ...es (sdist) * With sources, but with time consuming build * Without sources (binar...

(QB_NEW_EN_HYPHEN)

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/demos/lcore/cve_hermetic_build.md` at line 26, The phrase "time
consuming build" in the bullet item should be corrected to the hyphenated
compound adjective "time-consuming build"; locate the text "time consuming
build" in the docs/demos/lcore/cve_hermetic_build.md bullet and replace it with
"time-consuming build" to improve clarity.


## How to fix CVE?

* Package in PyPi?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Fix package index capitalization (PyPI).

Line 41 uses PyPi; the standard name is PyPI.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/demos/lcore/cve_hermetic_build.md` at line 41, Replace the incorrect
capitalization "PyPi" with the standard "PyPI" in the markdown text;
specifically update the bullet text "* Package in PyPi?" to "* Package in PyPI?"
so the package index name is correctly capitalized.

Comment on lines +47 to +50
- ETA - days (!!!)
* `pip` package
- dunno ATM :(

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Use neutral/professional wording for external-facing slides.

Lines 47–50 (days (!!!) and dunno ATM :() read informal and ambiguous; please replace with precise neutral status wording.

Suggested wording
-* Package in RH Python registry
-    - ask on forum-aipcc
-    - exact workflow to be defined + refined
-    - ETA - days (!!!)
+* Package in RH Python registry
+    - ask on forum-aipcc
+    - exact workflow to be defined and refined
+    - ETA: days

-* `pip` package
-    - dunno ATM :(
+* `pip` package
+    - workflow TBD
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- ETA - days (!!!)
* `pip` package
- dunno ATM :(
- ETA: days
* `pip` package
- workflow TBD
🧰 Tools
🪛 LanguageTool

[style] ~47-~47: Using many exclamation marks might seem excessive (in this case: 3 exclamation marks for a text that’s 707 characters long)
Context: ... be defined + refined - ETA - days (!!!) * pip package - dunno ATM :( --...

(EN_EXCESSIVE_EXCLAMATION)

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/demos/lcore/cve_hermetic_build.md` around lines 47 - 50, Replace the
informal/ambiguous phrases in the slide text — specifically the "days (!!!)" ETA
and "dunno ATM :(" pip package note — with neutral, professional status wording;
for example change the ETA to "ETA: TBD" or "ETA: pending" and change the pip
package line to "pip package: pending/under investigation" (or "TBD") so the
external-facing slides use precise, neutral language.

@tisnik tisnik merged commit 9742c74 into lightspeed-core:main Mar 17, 2026
21 of 24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant