Repository navigation
fix(docker): suppress DL3025 for HEALTHCHECK via inline pragma - #31
Merged
Merged
Conversation
Same issue as devops-ia/powerpipe#28: hadolint 2.15.1 (bundled by hadolint-action v3.5.0, bumped in #30) stops honoring the top-level .hadolint.yaml ignore list for DL3025 on HEALTHCHECK CMD specifically. The HEALTHCHECK CMD uses shell form intentionally (needs the || exit 1 fallback, not expressible in JSON/exec form), so suppress the rule inline instead of depending on the broken config-based ignore. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01D8MDhpdCqZCczobh8qoQBK
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problema
Mismo issue que devops-ia/powerpipe#28: hadolint 2.15.1 (empaquetado por
hadolint-actionv3.5.0, bump introducido en #30) detectaDL3025en elCMDdelHEALTHCHECKy deja de respetar la listaignore:del.hadolint.yamlpara este caso concreto.El
HEALTHCHECKusa forma shell intencionadamente (|| exit 1, no expresable en notación JSON/exec).Solución
Pragma inline de hadolint, que sí se respeta independientemente del bug de parseo del config:
Verificado localmente con el binario de hadolint 2.15.1: exit 0.
Esto desbloquea #30, cuyo job
Testfalla en el pasoLint Dockerfilepor este motivo.Generated by Claude Code