Adds hadolint to CI

Author: raonigabriel

.github/workflows/ci.yml

@@ -17,6 +17,7 @@ jobs:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of Sonar analysis
       - name: Hadolint
         uses: hadolint/[email protected]
+        ignore: SC2086,DL3018
         with:
           dockerfile: ./Dockerfile
       - name: SonarCloud Scan

.gitignore

@@ -0,0 +1 @@
+node_modules/**

.hadolint.yaml

@@ -0,0 +1,4 @@
+ignored:
+  - DL3018 # Pin versions in apk add. Instead of apk add <package>, use apk add <package>:<version>
+  - SC2086 # Double quote to prevent globbing and word splitting
+  - DL3006 # Always tag the version of an image explicitly