Categories

Infrastructure Scanning

Import Options

API Import

UI Import

Universal Importer (Pro)

File Types

JSON

Integrations

Hadolint Dockerfile check

Hadolint is an open-source Dockerfile linter written in Haskell that parses Dockerfiles into Abstract Syntax Trees to check for security vulnerabilities, performance issues, and adherence to best practices, while leveraging ShellCheck to validate inline Bash code within RUN instructions. The tool identifies common misconfigurations including the use of latest tags, missing version pinning, inefficient layer caching, security risks, and non-compliance with CIS Docker Benchmarks, providing detailed feedback with severity ratings to help developers create optimized, secure container images before deployment.

Start Your Free

Trial Today

Unify your security pipeline and orchestrate peace of mind with DefectDojo. We are security experts and here to help.