Dockerfile

@@ -12,4 +12,6 @@ FROM scratch
 COPY --from=builder /checker-caa /checker-caa
 USER 65534:65534
 EXPOSE 8080
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+  CMD ["/checker-caa", "-healthcheck"]
 ENTRYPOINT ["/checker-caa"]

checker/rule_test.go

@@ -348,7 +348,7 @@ func TestRule_CriticalIssue(t *testing.T) {
 }
 
 // TestRule_CriticalEmptyTag: a malformed record with the critical bit
-// set and an empty tag is still surfaced (issue #3 — previously
+// set and an empty tag is still surfaced (issue #3, previously
 // silently dropped).
 func TestRule_CriticalEmptyTag(t *testing.T) {
 	obs := &stubObsGetter{

go.mod

@@ -3,7 +3,7 @@ module git.happydns.org/checker-caa
 go 1.25.0
 
 require (
-	git.happydns.org/checker-sdk-go v1.4.0
+	git.happydns.org/checker-sdk-go v1.5.0
 	github.com/miekg/dns v1.1.72
 )
 

go.sum

@@ -1,5 +1,5 @@
-git.happydns.org/checker-sdk-go v1.4.0 h1:sO8EnF3suhNgYLRsbmCZWJOymH/oNMrOUqj3FEzJArs=
-git.happydns.org/checker-sdk-go v1.4.0/go.mod h1:aNAcfYFfbhvH9kJhE0Njp5GX0dQbxdRB0rJ0KvSC5nI=
+git.happydns.org/checker-sdk-go v1.5.0 h1:5uD5Cm6xJ+lwnhbJ09iCXGHbYS9zRh+Yh0NeBHkAPBY=
+git.happydns.org/checker-sdk-go v1.5.0/go.mod h1:aNAcfYFfbhvH9kJhE0Njp5GX0dQbxdRB0rJ0KvSC5nI=
 github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
 github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
 github.com/miekg/dns v1.1.72 h1:vhmr+TF2A3tuoGNkLDFK9zi36F2LS+hKTRW0Uf8kbzI=