# Incident-only. Caller checks this local tag's immutable image ID against the
# adjacent base lock before and after build, and checks unchanged base layers.
FROM youyidian-3d-material:material-base-b28607f43d14
USER root
COPY --chown=root:root verified-plan.json /tmp/material-hotfix-plan.json
COPY --chown=root:root verify.cjs /tmp/material-hotfix-verify.cjs
RUN node /tmp/material-hotfix-verify.cjs before
COPY --chown=root:root overlay/ /app/
ARG VCS_REF
LABEL org.opencontainers.image.revision=$VCS_REF
LABEL com.youyidian.material-hotfix.source-commit=4de34cd3520999e127a6fc5fc7e3e88ac6f12780
LABEL com.youyidian.material-hotfix.base-image=sha256:b28607f43d14609ec21ac8979a53889f002d6661b4ab80c69b8b67acdf9cc02b
RUN VCS_REF="$VCS_REF" node /tmp/material-hotfix-verify.cjs after && \
    rm /tmp/material-hotfix-plan.json /tmp/material-hotfix-verify.cjs
USER nextjs