-
Bug
-
Resolution: Fixed
-
Minor
-
None
-
warnings-ng 7.x
Hadolint is the most common linter for Dockerfiles.
https://github.com/hadolint/hadolint
It also supports checkstyle output:
hadolint Dockerfile -f checkstyle > checkstyle-hadolint.xml
Example hadolint output:
<?xml version='1.0' encoding='UTF-8'?><checkstyle version='4.3'><file name='Dockerfile' ><error line='13' column='1' severity='warning' message='Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`' source='DL3018' /><error line='16' column='1' severity='warning' message='In POSIX sh, set option pipefail is undefined.' source='SC2039' /><error line='16' column='1' severity='warning' message='Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check' source='DL4006' /></file></checkstyle>
This works in general with warnings-ng, but the display of the source attribute is not working as your parser expects a '.' inside. This should have a fallback mechanism to support tools that reuse the checkstyle format.
![2020-01-24 14_11_46-Linting Warnings [Jenkins] - Vivaldi.png](/secure/attachment/50034/2020-01-24%2014_11_46-Linting%20Warnings%20%5BJenkins%5D%20-%20Vivaldi.png)
