hlint VS hadolint

There is an open issue on hlint for it and the situation doesn't seem encouraging for anyone using apply-refact on save for Haskell files.

may want to look at something like https://github.com/ndmitchell/hlint for inspiration. it can be a little finicky but you can express mildly complicated linting rules

What bugged me was the asymmetry. Kubernetes and Terraform have a deep bench of scanners: Checkov, Trivy, kube-bench, Kubescape. Compose is an afterthought in most of them. The Compose-specific tools I found solved adjacent problems instead. Hadolint lints Dockerfiles, not Compose files. dclint checks Compose structure and style, not security.

# .pre-commit-config.yaml repos: - repo: https://github.com/Yelp/detect-secrets rev: v1.4.0 hooks: - id: detect-secrets args: ['--baseline', '.secrets.baseline'] exclude: 'tests/.*|\.lock$' - repo: https://github.com/pre-commit/pre-commit-hooks rev: v4.5.0 hooks: - id: check-added-large-files args: ['--maxkb=500'] - id: check-merge-conflict - id: detect-private-key - id: no-commit-to-branch args: ['--branch', 'main'] - repo: https://github.com/hadolint/hadolint rev: v2.12.0 hooks: - id: hadolint-docker name: Lint Dockerfiles

hadolint Description: Dockerfile linter, validate inline bash, written in Haskell. What we like: Well-maintained over the long term, active development, works very well. A true 12-factor application - can even be configured via environment vars! What we don't like: No JSON output. Extras: Lint Dockerfiles online

Hadolint Dockerfile Linter

Hadolint — Linter for your Dockerfile

[Source: Hadolint on GitHub]

One such linter is hadolint. It parses a Dockerfile and shows a warning for any errors that do not match its best practice rules.

Like hadolint: Dockerfile linter, validate inline bash, written in Haskell; Purescript, Unison, Idris languages implemented in Haskell. I recommend to check ideas behinds those projects. Especially Unison's mind-blowing something naive idea about infinite computational resources.

3. Hadolint: https://github.com/hadolint/hadolint Hadolint is a Dockerfile linter that helps you build best practice Docker images, reducing vulnerabilities in your container configurations.