Adds hadolint to CI

raonigabriel · Feb 7, 2023 · 629f467 · 629f467
1 parent d0884e7
commit 629f467
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -17,6 +17,7 @@ jobs:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of Sonar analysis
       - name: Hadolint
         uses: hadolint/hadolint-action@v3.1.0
+        ignore: SC2086,DL3018
         with:
           dockerfile: ./Dockerfile
       - name: SonarCloud Scan

diff --git a/.gitignore b/.gitignore
@@ -0,0 +1 @@
+node_modules/**
diff --git a/.hadolint.yaml b/.hadolint.yaml
@@ -0,0 +1,4 @@
+ignored:
+  - DL3018 # Pin versions in apk add. Instead of apk add <package>, use apk add <package>:<version>
+  - SC2086 # Double quote to prevent globbing and word splitting
+  - DL3006 # Always tag the version of an image explicitly