fix: move project version retrieval outside Dockerfile

Author: adg-flare

.dockerignore

@@ -13,6 +13,7 @@ coverage
 
 .gitignore
 .gitattributes
+.git
 
 .DS_Store
 .idea

.github/workflows/build-container.yml

@@ -18,7 +18,7 @@ jobs:
     - uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
     - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
 
-    - name: Set ALL_TAGS
+    - name: Set build variables
       env:
         REPOSITORY: '${{ github.repository }}'
       run: |
@@ -45,6 +45,13 @@ jobs:
         ALL_TAGS=$(printf ',%s' "${image_paths[@]}")
         echo "ALL_TAGS=${ALL_TAGS:1}" >>$GITHUB_ENV
 
+        PROJECT_VERSION="$(git describe --tags --always)"
+        if [[ "${{ github.ref_type }}" == "tag" ]]; then
+          PROJECT_VERSION="${{ github.ref_name }}"
+        fi
+        echo "PROJECT_VERSION=$PROJECT_VERSION" >>$GITHUB_ENV
+        echo "PROJECT_COMMIT_HASH=${{ github.sha }}" >>$GITHUB_ENV
+
     - name: Login to ghcr.io
       uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
       with:
@@ -59,3 +66,6 @@ jobs:
         platforms: linux/amd64,linux/arm64
         push: true
         tags: ${{ env.ALL_TAGS }}
+        build-args: |
+          PROJECT_VERSION=${{ env.PROJECT_VERSION }}
+          PROJECT_COMMIT_HASH=${{ env.PROJECT_COMMIT_HASH }}

Dockerfile

@@ -14,13 +14,14 @@ COPY . .
 ENV CI=true
 RUN pnpm run build && pnpm prune --prod
 
-# Versioning metadata, served by the app at runtime
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends git ca-certificates && \
-    rm -rf /var/lib/apt/lists/*
-RUN (git describe --tags --always > PROJECT_VERSION || echo "unknown" > PROJECT_VERSION) && \
-    date +%s > PROJECT_BUILD_DATE && \
-    (git rev-parse HEAD > PROJECT_COMMIT_HASH || echo "unknown" > PROJECT_COMMIT_HASH)
+# Versioning metadata, served by the app at runtime.
+# Values are injected by CI via build args and default to local-friendly values.
+ARG PROJECT_VERSION=local
+ARG PROJECT_COMMIT_HASH=local
+RUN PROJECT_BUILD_DATE="$(date -u +%s)" && \
+    printf '%s\n' "$PROJECT_VERSION" > PROJECT_VERSION && \
+    printf '%s\n' "$PROJECT_BUILD_DATE" > PROJECT_BUILD_DATE && \
+    printf '%s\n' "$PROJECT_COMMIT_HASH" > PROJECT_COMMIT_HASH
 
 # ---- Runtime stage ----
 FROM node:24-slim@sha256:bf22df20270b654c4e9da59d8d4a3516cce6ba2852e159b27288d645b7a7eedc AS runtime

package.json

@@ -15,6 +15,7 @@
     "start:dev": "nest start --watch",
     "start:debug": "nest start --debug --watch",
     "start:prod": "node dist/main",
+    "docker:build": "docker build --build-arg PROJECT_VERSION=\"$(git describe --tags --always)\" --build-arg PROJECT_COMMIT_HASH=\"$(git rev-parse HEAD)\" -t verifier-indexer-api:local .",
     "-----Linting-----": "echo \"Linting scripts\"",
     "lint:fix": "eslint \"{src,test}/**/*.ts\" --fix",
     "lint:check": "eslint \"{src,test}/**/*.ts\"",