byu-oit/hw-fargate-api

Lint Dockerfile

Closed this issue · 2 comments

GaryGSC commented

hadolint is a pretty good option. There's an action for it too, but it's a little awkward that they only offer a @v2.1.0 and not a @v2.

GaryGSC commented

Interestingly, it can output SARIF for use with GitHub Advanced Security.

GaryGSC commented

BTW, #706 added a hadolint step to the Deploy workflow.