fix: add ca-certificates to all 22 base image Dockerfiles

sjarmak · claude · sjarmak · commit d96db63e9c87 · 2026-02-24T00:45:33.000Z
All base images were missing ca-certificates, causing git clone
over HTTPS to fail with SSL certificate verification errors when
Docker cache is cold. This was the root cause of the
test-coverage-gap-001 build failure.

Co-Authored-By: Claude Opus 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/base_images/Dockerfile.camel-1006f047 b/base_images/Dockerfile.camel-1006f047
@@ -3,12 +3,13 @@ FROM eclipse-temurin:17-jdk
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     python3 \
     python3-pip \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/camel--1006f047.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/camel--1006f047.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
diff --git a/base_images/Dockerfile.containerd-317286ac b/base_images/Dockerfile.containerd-317286ac
@@ -3,6 +3,7 @@ FROM golang:1.23-bookworm
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     && rm -rf /var/lib/apt/lists/*
diff --git a/base_images/Dockerfile.curl-09e25b9d b/base_images/Dockerfile.curl-09e25b9d
@@ -3,6 +3,7 @@ FROM debian:bookworm-slim
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     python3 \
@@ -11,6 +12,6 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     bc \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/curl--09e25b9d.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/curl--09e25b9d.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
diff --git a/base_images/Dockerfile.django-674eda1c b/base_images/Dockerfile.django-674eda1c
@@ -3,11 +3,12 @@ FROM python:3.11-slim
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/django--674eda1c.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/django--674eda1c.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
 
diff --git a/base_images/Dockerfile.django-9e7cc2b6 b/base_images/Dockerfile.django-9e7cc2b6
@@ -3,11 +3,12 @@ FROM python:3.12-bookworm
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/django--9e7cc2b6.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/django--9e7cc2b6.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
 
diff --git a/base_images/Dockerfile.envoy-1d0ba73a b/base_images/Dockerfile.envoy-1d0ba73a
@@ -3,12 +3,13 @@ FROM ubuntu:22.04
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     python3 \
     ripgrep \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/envoy--1d0ba73a.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/envoy--1d0ba73a.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
diff --git a/base_images/Dockerfile.envoy-d7809ba2 b/base_images/Dockerfile.envoy-d7809ba2
@@ -3,13 +3,14 @@ FROM ubuntu:22.04
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     python3 \
     python3-pip \
     ripgrep \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/envoy--d7809ba2.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/envoy--d7809ba2.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
diff --git a/base_images/Dockerfile.etcd-d89978e8 b/base_images/Dockerfile.etcd-d89978e8
@@ -3,6 +3,7 @@ FROM golang:1.23-bookworm
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     && rm -rf /var/lib/apt/lists/*
diff --git a/base_images/Dockerfile.flask-798e006f b/base_images/Dockerfile.flask-798e006f
@@ -3,6 +3,7 @@ FROM python:3.11-slim
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     && rm -rf /var/lib/apt/lists/*
diff --git a/base_images/Dockerfile.flink-0cc95fcc b/base_images/Dockerfile.flink-0cc95fcc
@@ -3,12 +3,13 @@ FROM eclipse-temurin:17-jdk
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     python3 \
     python3-pip \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/flink--0cc95fcc.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/flink--0cc95fcc.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
diff --git a/base_images/Dockerfile.flipt-3d5a345f b/base_images/Dockerfile.flipt-3d5a345f
@@ -3,11 +3,12 @@ FROM golang:1.23-bookworm
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/flipt--3d5a345f.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/flipt--3d5a345f.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
 
diff --git a/base_images/Dockerfile.k8s-11602f08 b/base_images/Dockerfile.k8s-11602f08
@@ -3,12 +3,13 @@ FROM golang:1.23-bookworm
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     python3 \
     python3-pip \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/kubernetes--11602f08.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/kubernetes--11602f08.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
diff --git a/base_images/Dockerfile.k8s-8c9c67c0 b/base_images/Dockerfile.k8s-8c9c67c0
@@ -3,12 +3,13 @@ FROM golang:1.23-bookworm
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     python3 \
     python3-pip \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/kubernetes--8c9c67c0.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/kubernetes--8c9c67c0.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
diff --git a/base_images/Dockerfile.kafka-0753c489 b/base_images/Dockerfile.kafka-0753c489
@@ -3,10 +3,11 @@ FROM eclipse-temurin:17-jdk
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/kafka--0753c489.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/kafka--0753c489.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
diff --git a/base_images/Dockerfile.kafka-e678b4b b/base_images/Dockerfile.kafka-e678b4b
@@ -3,12 +3,13 @@ FROM eclipse-temurin:21-jdk
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     python3 \
     ripgrep \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/kafka--e678b4b.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/kafka--e678b4b.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
diff --git a/base_images/Dockerfile.numpy-a639fbf5 b/base_images/Dockerfile.numpy-a639fbf5
@@ -3,6 +3,7 @@ FROM python:3.11-slim
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     && rm -rf /var/lib/apt/lists/*
diff --git a/base_images/Dockerfile.pandas-41968da5 b/base_images/Dockerfile.pandas-41968da5
@@ -3,6 +3,7 @@ FROM python:3.11-slim
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     && rm -rf /var/lib/apt/lists/*
diff --git a/base_images/Dockerfile.postgres-5a461dc4 b/base_images/Dockerfile.postgres-5a461dc4
@@ -3,6 +3,7 @@ FROM gcc:14-bookworm
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     python3 \
@@ -13,6 +14,6 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     zlib1g-dev \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/postgres--5a461dc4.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/postgres--5a461dc4.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
diff --git a/base_images/Dockerfile.requests-421b8733 b/base_images/Dockerfile.requests-421b8733
@@ -3,6 +3,7 @@ FROM python:3.11-slim
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     && rm -rf /var/lib/apt/lists/*
diff --git a/base_images/Dockerfile.rust-01f6ddf7 b/base_images/Dockerfile.rust-01f6ddf7
@@ -3,6 +3,7 @@ FROM rust:1.82-bookworm
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     && rm -rf /var/lib/apt/lists/*
diff --git a/base_images/Dockerfile.scikit-learn-cb7e82dd b/base_images/Dockerfile.scikit-learn-cb7e82dd
@@ -3,6 +3,7 @@ FROM python:3.11-slim
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     && rm -rf /var/lib/apt/lists/*
diff --git a/base_images/Dockerfile.strata-66225ca9 b/base_images/Dockerfile.strata-66225ca9
@@ -3,13 +3,14 @@ FROM eclipse-temurin:17-jdk
 WORKDIR /workspace
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     git \
     curl \
     python3 \
     python3-pip \
     maven \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone --depth 1 https://github.com/sg-benchmarks/Strata--66225ca9.git . && \
+RUN git clone --depth 1 https://github.com/sg-evals/Strata--66225ca9.git . && \
     git config user.email "agent@example.com" && \
     git config user.name "Agent"
