Summary
Since we are going to be publishing a public Docker image for consumption, we should try to have automation to ensure best practice with the images we create. Hadolint is a tool I've used previously for this purpose (and might be an industry standard).
Desired Behavior
Hadolint runs & checks Dockerfile. This can always run (like for every commit), or if we can, ideally we set this up so that this check only runs when changes to the Dockerfile are present.
Possible Solution
Create a new workflow, or update a pre-existing workflow where we can insert this new check.
Summary
Since we are going to be publishing a public Docker image for consumption, we should try to have automation to ensure best practice with the images we create. Hadolint is a tool I've used previously for this purpose (and might be an industry standard).
Desired Behavior
Hadolint runs & checks Dockerfile. This can always run (like for every commit), or if we can, ideally we set this up so that this check only runs when changes to the Dockerfile are present.
Possible Solution
Create a new workflow, or update a pre-existing workflow where we can insert this new check.