From 2a3ab39a9584f2b66793f67a2e22bcccae8b4f7c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 31 Aug 2026 10:22:33 +0000 Subject: [PATCH 1/2] Bump hadolint/hadolint-action from 3.3.0 to 3.5.0 Bumps [hadolint/hadolint-action](https://github.com/hadolint/hadolint-action) from 3.3.0 to 3.5.0. - [Release notes](https://github.com/hadolint/hadolint-action/releases) - [Commits](https://github.com/hadolint/hadolint-action/compare/v3.3.0...v3.5.0) --- updated-dependencies: - dependency-name: hadolint/hadolint-action dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/lint.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index fae7222..0e8dd01 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -16,6 +16,6 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v7 - - uses: hadolint/hadolint-action@v3.3.0 + - uses: hadolint/hadolint-action@v3.5.0 with: dockerfile: Containerfile From b61248f442b3698bcbc2714d12cddc51ea1cca0c Mon Sep 17 00:00:00 2001 From: Bob Date: Tue, 1 Sep 2026 18:12:26 +0000 Subject: [PATCH 2/2] Fix hadolint SC2006 style issue and suppress DL3066 - Replace backtick with $(uname -m) in Containerfile (SC2006 style fix) - Suppress DL3066 in .hadolint.yaml: builder stage uses 'adm' from a controlled base image; literal username is intentional Assisted-By: claude-opus-4-5 --- .hadolint.yaml | 1 + Containerfile | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.hadolint.yaml b/.hadolint.yaml index f9123de..f47e444 100644 --- a/.hadolint.yaml +++ b/.hadolint.yaml @@ -3,3 +3,4 @@ ignored: - DL3041 # hardcoding version of rpms is not how this should work - DL3022 # COPY --from can work from another image, not needed to be a layer - DL3033 # hardcoding version of rpms is not how this should work + - DL3066 # builder stage uses 'adm' from a controlled base image; literal name is intentional diff --git a/Containerfile b/Containerfile index 80a04d7..fcb9657 100644 --- a/Containerfile +++ b/Containerfile @@ -46,7 +46,7 @@ RUN rpmbuild -bb rpmbuild/SPECS/manticore-tzdata.spec # Download boost RPMs for runtime WORKDIR /tmp/boost_rpms -RUN dnf download --arch `uname -m` $DEPS_NON_UBI_RUNTIME +RUN dnf download --arch "$(uname -m)" $DEPS_NON_UBI_RUNTIME # it is ok not to tag ubi image as it is stable enough # hadolint ignore=DL3006