forked from sourcegraph/sourcegraph-public-snapshot
-
Notifications
You must be signed in to change notification settings - Fork 0
/
.hadolint.yaml
15 lines (15 loc) · 866 Bytes
/
.hadolint.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
ignored:
# We use Alpine, and Alpine packages only keep the most recent few releases of packages,
# with older releases being dropped on a regular basis. This means pinning versions as
# enforced in https://github.com/hadolint/hadolint/wiki/DL3018 causing frequent build
# failures due to missing packages or mismatched inter-package dependencies, at which
# point we just upgrade anyway, negating the use for pinning packages. There are no build
# reproducibility advantages either since we cannot rebuild an image if a package version
# required is no longer available.
#
# To force the inclusion of a security patch, use 'package>=$version' instead of pinning.
- DL3018
# Noisy: Multiple consecutive `RUN` instructions. Consider consolidation.
- DL3059
# Noisy: this lint triggers after unrelated changes are made, so @rvantonder decided to suppress it.
- DL3047