Just Say No To `:Latest`

• hadolint

  25 9,987 7.1 Haskell

  Dockerfile linter, validate inline bash, written in Haskell

  

Worth noting that Hadolint[1] raises warnings the issues mentioned in the article. Some examples of warnings:

- https://github.com/hadolint/hadolint/wiki/DL3007: Using latest is prone to errors if the image will ever update. Pin the version explicitly to a release tag.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• dockerfile-image-update

  1 134 6.6 Java

  A tool that helps you get security patches for Docker images into production as quickly as possible without breaking things

  

A similar tool to dependabot written by Salesforce: https://github.com/salesforce/dockerfile-image-update

• semgrep-rules

  8 728 9.4 Solidity

  Semgrep rules registry

  

Hadolint is great! If you want to customize your lint logic beyond the checks in it, I recently wrote a Semgrep rule to require all our Dockerfiles to pin images with a sha256 hash that could be a good starting point: https://github.com/returntocorp/semgrep-rules/pull/1861/file...

Suggest a related project