Hadolint Dockerfile check
Hadolint is an open-source Dockerfile linter written in Haskell that parses Dockerfiles into Abstract Syntax Trees to check for security vulnerabilities, performance issues, and adherence to best practices, while leveraging ShellCheck to validate inline Bash code within RUN instructions. The tool identifies common misconfigurations including the use of latest tags, missing version pinning, inefficient layer caching, security risks, and non-compliance with CIS Docker Benchmarks, providing detailed feedback with severity ratings to help developers create optimized, secure container images before deployment.