Docker hadolint

Docker & Hadolint validation (2026). Use when working with Docker, containers, or validating Dockerfiles.From its SKILL.md

Install

npx -y skills add TheBeardedBearSAS/claude-craft --skill docker-hadolint

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

SKILL.md

2.0 KB, as published. Nobody here has run it

Docker Engine : 29.5.2 (patch sécurité, juin 2026)
Source : https://docs.docker.com/engine/release-notes/29/
Docker Compose : Spec v5.0.0 "Mont Blanc" (champ version: obsolète depuis v2.40+)
Source : https://www.compose-spec.io/
Hadolint : v2.12.0 (version stable pinnée)
Source : https://github.com/hadolint/hadolint/releases/tag/v2.12.0

TOUJOURS utiliser la version pinnée v2.12.0 (jamais latest ou sans tag).

# Validation Dockerfile
docker run --rm -i hadolint/hadolint:v2.12.0 < Dockerfile

# Validation via Makefile (recommandé)
make hadolint

RUN --mount=type=cache,target=/var/cache/apk \
    apk add --no-cache postgresql-dev

Bénéfice : Réduction temps build de 40-60%
Source : https://docs.docker.com/build/cache/

RUN --mount=type=secret,id=composer_token \
    COMPOSER_AUTH="$(cat /run/secrets/composer_token)" composer install

Bénéfice : Aucun secret dans l'image finale
Source : https://docs.docker.com/build/building/secrets/

FROM php:8.4-fpm-alpine AS builder
RUN composer install

FROM php:8.4-fpm-alpine AS runtime
COPY --from=builder /app /app

Bénéfice : Réduction taille image de 60-97%
Source : https://docs.docker.com/build/building/multi-stage/

FROM gcr.io/distroless/php8.4-fpm
COPY --from=builder /app /app

Bénéfice : Surface d'attaque minimale, CVE réduites de 90%
Source : https://github.com/GoogleContainerTools/distroless

Voir @.claude/references/symfony/docker.md pour architecture complète et exemples.