From a4b4ba62b5bd0c57d4c92a8f0e02b02a56ebc0cb Mon Sep 17 00:00:00 2001 From: Steve Breker Date: Mon, 29 Apr 2024 14:22:46 -0700 Subject: [PATCH] Disable Hadolint rules Skip Hadolint rule DL3018 (DL3018 warning: Pin versions in apk add) because Alpine does not keep older package versions which will cause builds to break when packages are updated. Skip Hadolint rule DL3003 (Use WORKDIR to switch to a directory) as breaking up the main 'RUN apk add' statement would create more layers in the build. --- .github/workflows/lint.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index d53b505..2bdc449 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -33,6 +33,7 @@ jobs: with: dockerfile: 1.1.21.2/Dockerfile failure-threshold: warning + ignore: DL3018,DL3003 checkov: name: Run Checkov for Dockerfile Security Analysis