refactor: minor (#317)

* refactor: minor

* Update ci.yml

* Update .yamllint.yaml

Author: yxtay

.github/workflows/ci.yml

@@ -56,7 +56,7 @@ jobs:
 
       - run: |
           uv lock --check
-          uv sync --locked
+          uv sync
           uv pip list
 
       - run: make lint test
@@ -102,7 +102,7 @@ jobs:
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          password: ${{ github.token }}
 
       - if: ${{ github.event_name == 'push' || github.ref_name == github.event.repository.default_branch }}
         uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # v6

.trunk/configs/.yamllint.yaml

@@ -1,7 +1,7 @@
 rules:
   quoted-strings:
     required: only-when-needed
-    extra-allowed: ["{|}"]
+    extra-allowed: ["{|}?"]
   key-duplicates: {}
   octal-values:
     forbid-implicit-octal: true

Dockerfile

@@ -18,6 +18,9 @@ ARG VIRTUAL_ENV=${APP_HOME}/.venv
 ENV PATH=${VIRTUAL_ENV}/bin:${PATH} \
     PYTHONFAULTHANDLER=1 \
     PYTHONUNBUFFERED=1 \
+    UV_LOCKED=1 \
+    UV_NO_SYNC=1 \
+    UV_PYTHON_DOWNLOADS=manual \
     UV_PYTHON_INSTALL_DIR=/opt \
     VIRTUAL_ENV=${VIRTUAL_ENV}
 
@@ -45,14 +48,13 @@ RUN apt-get update && \
     && rm -rf /var/lib/apt/lists/*
 
 ARG PYTHONDONTWRITEBYTECODE=1
-ENV UV_LOCKED=1 \
-    UV_NO_CACHE=1 \
-    UV_NO_SYNC=1
+ARG UV_NO_CACHE=1
 
 # set up python
 COPY --from=ghcr.io/astral-sh/uv:latest@sha256:83285c39ee68ed64708fca1495c2d0aad084e9ac02a8910f5180b8e36bcf803a /uv /uvx /bin/
 COPY .python-version pyproject.toml uv.lock ./
-RUN uv sync --no-default-groups --no-install-project && \
+RUN uv python install && \
+    uv sync --no-default-groups --no-install-project && \
     chown -R "${USER}:${USER}" "${VIRTUAL_ENV}" && \
     chown -R "${USER}:${USER}" "${APP_HOME}" && \
     uv pip list
@@ -103,7 +105,7 @@ COPY main.py main.py
 RUN pyinstaller --hidden-import example_app.main --onefile main.py && \
     staticx --strip dist/main /main
 
-USER user
+USER ${USER}
 ENTRYPOINT [ "/dist/main" ]
 
 ##

pyproject.toml

@@ -6,7 +6,7 @@ build-backend = "poetry.core.masonry.api"
 name = "example-app"
 version = "0.1.0"
 description = "Python example app incorporating best practices"
-authors = [{ name = "yxtay", email = "wyextay@gmail.com" }]
+authors = [{ name = "yxtay", email = "[email protected].com" }]
 license = "MIT"
 requires-python = "~=3.11"
 dependencies = [