adjust docker-lint to use hadolint #635
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Docker Lint | |
on: | |
pull_request: | |
# paths: | |
# - 'Containers/**' | |
push: | |
branches: | |
- main | |
paths: | |
- 'Containers/**' | |
permissions: | |
contents: read | |
concurrency: | |
group: docker-lint-${{ github.head_ref || github.run_id }} | |
cancel-in-progress: true | |
jobs: | |
docker-lint: | |
runs-on: ubuntu-latest | |
name: docker-lint | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v3 | |
- name: Install hadolint | |
run: | | |
sudo wget https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Linux-x86_64 -O /usr/bin/hadolint | |
sudo chmod +x /usr/bin/hadolint | |
- name: run lint | |
run: | | |
DOCKERFILES="$(find ./Containers -name Dockerfile)" | |
mapfile -t DOCKERFILES <<< "$DOCKERFILES" | |
for file in "${DOCKERFILES[@]}"; do | |
# DL3018 warning: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>` | |
# DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>` | |
# DL3002 warning: Last USER should not be root | |
# DL3003 warning: Use WORKDIR to switch to a directory | |
# DL3004 error: Do not use sudo as it leads to unpredictable behavior. Use a tool like gosu to enforce root | |
hadolint "$file" --ignore DL3018 --ignore DL3008 --ignore DL3002 --ignore DL3003 --ignore DL3004 | tee -a ./hadolint.log | |
done | |
cat ./hadolint.log | |
if grep -q "DL[0-9]\+\|SC[0-9]\+" ./hadolint.log; then | |
exit 1 | |
fi |