fix: ensure action runs from GitHub workspace and handle TLS build on musl

Author: itscheems

Dockerfile

@@ -54,12 +54,11 @@ RUN apk add --no-cache ca-certificates
 RUN addgroup -g 1000 appuser && \
     adduser -D -u 1000 -G appuser appuser
 
-WORKDIR /app
-COPY --from=builder /app/target/release/pr-checker /app/pr-checker
+# GitHub Actions workspace is mounted at /github/workspace
+WORKDIR /github/workspace
+COPY --from=builder /app/target/release/pr-checker /usr/local/bin/pr-checker
 
-# Set ownership
-RUN chown -R appuser:appuser /app
 # Switch to non-root user
 USER appuser
 
-ENTRYPOINT ["/app/pr-checker"]
+ENTRYPOINT ["/usr/local/bin/pr-checker"]

src/main.rs

@@ -19,7 +19,7 @@ mod github;
 mod rules;
 
 use clap::Parser;
-use tracing::{error, info};
+use tracing::{error, info, warn};
 
 #[derive(Parser)]
 #[command(name = "pr-checker")]
@@ -59,6 +59,15 @@ async fn main() {
 		)
 		.init();
 
+	// Ensure we operate in the GitHub workspace when running as an Action
+	if let Ok(ws) = std::env::var("GITHUB_WORKSPACE") {
+		if let Err(e) = std::env::set_current_dir(&ws) {
+			warn!("Failed to set current dir to GITHUB_WORKSPACE={ws}: {e}");
+		} else {
+			info!("Working directory set to GITHUB_WORKSPACE: {}", ws);
+		}
+	}
+
 	let args = Args::parse();
 
 	// Get config path from args or GitHub Actions input or default