chore: add git-gtr support to devcontainer

[dyoshikawa]

Summary

• Install git-gtr in the devcontainer image.
• Add workspace worktrees and opencode share volumes to the devcontainer.
• Ensure the worktrees volume has the correct ownership during init.

Test Plan

• pnpm cicheck

[dyoshikawa]

/oc review

[github-actions]

---

PR #1190 Review Summary: "chore: add git-gtr support to devcontainer"

Code Review Results

Overall Assessment: ✅ Approved with minor suggestions

The changes are well-structured and accomplish the stated goals. The code follows existing patterns in the codebase.

Stated Purpose	Status
Install git-gtr in devcontainer image	✅ Complete
Add workspace worktrees volume	✅ Complete
Add opencode share volume	✅ Complete
Ensure worktrees volume has correct ownership	✅ Complete

Key Suggestions:

1. Required: Pin git-gtr to a specific version/commit for reproducibility
2. Recommended: Add --depth 1 to the git clone command
3. Optional: Add a verification step after installation

---

Security Review Results

Overall Assessment: ✅ LOW RISK

No malicious code detected. The changes are appropriate for a development container.

Category	Finding	Severity
Supply Chain	Unpinned git clone	🟡 Medium
Volume Mounts	Named volumes for worktrees	🟢 None
File Ownership	sudo chown for volume	🟢 None
Malicious Code	None detected	🟢 None

Recommendation: Pin git-worktree-runner to a specific version (commit hash or tag) to ensure reproducible builds and protect against supply chain attacks.

---

Conclusion

Both reviews agree on the main actionable item: pin the git-worktree-runner version in the Dockerfile. This is a low-risk PR that follows existing patterns and accomplishes its stated purpose.

github run