Add hadolint

.github/workflows/build-push.yml

@@ -13,8 +13,14 @@ jobs:
       contents: read
       id-token: write
     steps:
+
     - uses: 'actions/checkout@v4'
 
+    - uses: hadolint/[email protected]
+      with:
+        dockerfile: ${{ inputs.dockerFile }}
+        verbose: true
+
     - name: Extract branch name as docker tag
       shell: bash
       run: |-

Dockerfile

@@ -3,7 +3,10 @@ FROM golang:1.21-alpine
 WORKDIR /app
 
 RUN apk update && \
-    apk add curl bash ca-certificates && \
+    apk add --no-cache \
+      curl==8.5.0-r0 \
+      bash==5.2.21-r0 \
+      ca-certificates==20230506-r0 && \
     update-ca-certificates
 
 COPY . ./

docker-images/curl/Dockerfile

@@ -3,6 +3,6 @@ ARG DOCKER_REPOSITORY=local
 FROM ${DOCKER_REPOSITORY}/scyllaridae:${TAG}
 
 RUN apk update && \
-    apk add --no-cache curl
+    apk add --no-cache curl==8.5.0-r0
 
 COPY scyllaridae.yml /app/scyllaridae.yml

docker-images/ffmpeg/Dockerfile

@@ -3,6 +3,6 @@ ARG DOCKER_REPOSITORY=local
 FROM ${DOCKER_REPOSITORY}/scyllaridae:${TAG}
 
 RUN apk update && \
-    apk add --no-cache ffmpeg
+    apk add --no-cache ffmpeg==6.1.1-r0
 
 COPY scyllaridae.yml /app/scyllaridae.yml

docker-images/fits/Dockerfile

@@ -3,6 +3,6 @@ ARG DOCKER_REPOSITORY=local
 FROM ${DOCKER_REPOSITORY}/scyllaridae:${TAG}
 
 RUN apk update && \
-    apk add --no-cache curl
+    apk add --no-cache curl==8.5.0-r0
 
 COPY scyllaridae.yml /app/scyllaridae.yml

docker-images/imagemagick/Dockerfile

@@ -3,6 +3,6 @@ ARG DOCKER_REPOSITORY=local
 FROM ${DOCKER_REPOSITORY}/scyllaridae:${TAG}
 
 RUN apk update && \
-    apk add --no-cache imagemagick
+    apk add --no-cache imagemagick==7.1.1.26-r0
 
 COPY scyllaridae.yml /app/scyllaridae.yml

docker-images/tesseract/Dockerfile

@@ -2,18 +2,20 @@ ARG TAG=main
 ARG DOCKER_REPOSITORY=local
 FROM ${DOCKER_REPOSITORY}/scyllaridae:${TAG}
 
+ARG TESSERACT_VERSION=5.3.3-r1
+
 RUN apk update && \
     apk add --no-cache leptonica-dev \
-        tesseract-ocr \
-        tesseract-ocr-data-eng \
-        tesseract-ocr-data-fra \
-        tesseract-ocr-data-spa \
-        tesseract-ocr-data-ita \
-        tesseract-ocr-data-por \
-        tesseract-ocr-data-hin \
-        tesseract-ocr-data-deu \
-        tesseract-ocr-data-jpn \
-        tesseract-ocr-data-rus \
-        poppler-utils
+        tesseract-ocr==${TESSERACT_VERSION} \
+        tesseract-ocr-data-eng==${TESSERACT_VERSION} \
+        tesseract-ocr-data-fra==${TESSERACT_VERSION} \
+        tesseract-ocr-data-spa==${TESSERACT_VERSION} \
+        tesseract-ocr-data-ita==${TESSERACT_VERSION} \
+        tesseract-ocr-data-por==${TESSERACT_VERSION} \
+        tesseract-ocr-data-hin==${TESSERACT_VERSION} \
+        tesseract-ocr-data-deu==${TESSERACT_VERSION} \
+        tesseract-ocr-data-jpn==${TESSERACT_VERSION} \
+        tesseract-ocr-data-rus==${TESSERACT_VERSION} \
+        poppler-utils==23.10.0-r0
 
 COPY scyllaridae.yml /app/scyllaridae.yml