cloud-native-toolkit / planning

The is the planning repo to manage the cross project Epics and Issues. Tasks and Bugs
3 stars 1 forks source link

Maureen wants a Tekton task to validate a Dockerfile with hadolint #599

Open seansund opened 3 years ago

orhanIBM commented 3 years ago

Below are the hadolint errors on the Starter Kits. The reporting order is:

  1. Starter Kit Git Repo Name
  2. Repo Url
  3. Hadolint Errors

React UI Patterns https://github.com/IBM/template-node-react//blob/master/Dockerfile Dockerfile:10 DL3003 Use WORKDIR to switch to a directory

Angular UI Patterns https://github.com/IBM/template-node-angular/blob/master/Dockerfile Dockerfile:1 DL3006 Always tag the version of an image explicitly Dockerfile:7 SC2164 Use 'cd ... || exit' or 'cd ... || return' in case cd fails. Dockerfile:7 DL3003 Use WORKDIR to switch to a directory Dockerfile:16 DL3000 Use absolute WORKDIR

Typescript GraphQL https://github.com/IBM/template-graphql-typescript/blob/master/Dockerfile Dockerfile:20 DL3025 Use arguments JSON notation for CMD and ENTRYPOINT arguments

Typescript Microservice https://github.com/IBM/template-node-typescript/blob/master/Dockerfile Dockerfile:21 DL3025 Use arguments JSON notation for CMD and ENTRYPOINT arguments

Spring Boot Microservice https://github.com/IBM/template-java-spring/blob/master/Dockerfile No Errors on Java Gradle Pipeline / Note that Java Maven pipeline could not run for this repo given no pom.xml

Go Gin Microservice https://github.com/IBM/template-go-gin/blob/master/Dockerfile Dockerfile:7 DL3018 Pin versions in apk add. Instead of apk add <package> use apk add <package>=<version> Dockerfile:24 DL3006 Always tag the version of an image explicitly