thebeardedbearsas/docker-hadolint
.claude/skills/docker-hadolint/SKILL.md
Docker & Hadolint validation (2026). Use when working with Docker, containers, or validating Dockerfiles.
$ install --global
skillsauthnpx skillsauth add thebeardedbearsas/claude-craft docker-hadolintInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 10:29 AM366.8s1 file scanned
SKILL.md
- name:
- docker-hadolint
- description:
- Docker & Hadolint validation (2026). Use when working with Docker, containers, or validating Dockerfiles.
Docker & Hadolint (2026)
Versions (avril 2026)
- Docker Engine : 29.4.0
Source : https://www.docker.com/blog/docker-engine-version-29/ - Docker Compose : Spec v5.0.0 "Mont Blanc" (champ
version:obsolète depuis v2.40+)
Source : https://www.compose-spec.io/ - Hadolint : v2.12.0 (version stable pinnée)
Source : https://github.com/hadolint/hadolint/releases/tag/v2.12.0
Validation Hadolint
TOUJOURS utiliser la version pinnée v2.12.0 (jamais latest ou sans tag).
# Validation Dockerfile
docker run --rm -i hadolint/hadolint:v2.12.0 < Dockerfile
# Validation via Makefile (recommandé)
make hadolint
Best Practices 2026
BuildKit Cache Mounts
RUN --mount=type=cache,target=/var/cache/apk \
apk add --no-cache postgresql-dev
Bénéfice : Réduction temps build de 40-60%
Source : https://docs.docker.com/build/cache/
BuildKit Secrets
RUN --mount=type=secret,id=composer_token \
COMPOSER_AUTH="$(cat /run/secrets/composer_token)" composer install
Bénéfice : Aucun secret dans l'image finale
Source : https://docs.docker.com/build/building/secrets/
Multi-Stage Builds
FROM php:8.2-fpm-alpine AS builder
RUN composer install
FROM php:8.2-fpm-alpine AS runtime
COPY --from=builder /app /app
Bénéfice : Réduction taille image de 60-97%
Source : https://docs.docker.com/build/building/multi-stage/
Images Distroless
FROM gcr.io/distroless/php8.2-fpm
COPY --from=builder /app /app
Bénéfice : Surface d'attaque minimale, CVE réduites de 90%
Source : https://github.com/GoogleContainerTools/distroless
Documentation Complète
Voir @.claude/references/symfony/docker.md pour architecture complète et exemples.
Related Skills
thebeardedbearsas/ecosystem-tools
tools
VerifiedTrustedCommunity
Third-party Claude Code token/context/code-review tools. Use when choosing or recommending an external tool to reduce token usage, manage context, or review large codebases.
98SKILL.mdUpdated Jun 4, 2026
thebeardedbearsas/workflow-analysis
development
VerifiedTrustedCommunity
Mandatory analysis workflow for understanding codebase before changes
98SKILL.mdUpdated Apr 17, 2026
thebeardedbearsas/testing
testing
VerifiedTrustedCommunity
TDD/BDD testing principles, test patterns, and coverage strategies
98SKILL.mdUpdated Apr 17, 2026
thebeardedbearsas/solid-principles
development
VerifiedTrustedCommunity
SOLID principles for clean code design and architecture
98SKILL.mdUpdated Apr 17, 2026