From f872a338fbdf976fdd7ed2a9b9da7cb9f34a1c09 Mon Sep 17 00:00:00 2001 From: Gonzalo Diaz Date: Sun, 20 Sep 2026 21:03:47 -0300 Subject: [PATCH] Add Hadolint workflow for Dockerfile linting This workflow configures Hadolint to run on pushes and pull requests to the main branch, as well as on a schedule. It includes steps to check out the code, run Hadolint, and upload the results in SARIF format. --- .github/workflows/hadolint.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/hadolint.yml b/.github/workflows/hadolint.yml index e5ef074..944d048 100644 --- a/.github/workflows/hadolint.yml +++ b/.github/workflows/hadolint.yml @@ -37,13 +37,15 @@ jobs: - name: Checkout code uses: actions/checkout@v7.0.1 + # yamllint disable rule:line-length - name: Run hadolint - uses: hadolint/hadolint-action@v3.5.0 + uses: hadolint/hadolint-action@06be81baf89a55ffd0e24b8f04a4185738dd3387 # v3.5.0 with: dockerfile: ./Dockerfile format: sarif output-file: hadolint-results.sarif no-fail: true + # yamllint enable rule:line-length - name: Upload analysis results to GitHub uses: github/codeql-action/upload-sarif@v4.38.1