How do I install the Docker Hadolint skill?

Run npx skillmds@latest add thebeardedbearsas/docker-hadolint in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Docker Hadolint safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Docker Hadolint?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Docker Hadolint free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Docker Hadolint?

TheBeardedBearSAS (@thebeardedbearsas) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Docker Hadolint by thebeardedbearsas

Name: Docker Hadolint
Rating: 4.2 (5 reviews)
Author: TheBeardedBearSAS

File contents

Docker & Hadolint (2026)

Versions (avril 2026)

Docker Engine : 29.5.2 (patch sécurité, juin 2026)
Source : https://docs.docker.com/engine/release-notes/29/
Docker Compose : Spec v5.0.0 "Mont Blanc" (champ version: obsolète depuis v2.40+)
Source : https://www.compose-spec.io/
Hadolint : v2.12.0 (version stable pinnée)
Source : https://github.com/hadolint/hadolint/releases/tag/v2.12.0

Validation Hadolint

TOUJOURS utiliser la version pinnée v2.12.0 (jamais latest ou sans tag).

# Validation Dockerfile
docker run --rm -i hadolint/hadolint:v2.12.0 < Dockerfile

# Validation via Makefile (recommandé)
make hadolint

Best Practices 2026

BuildKit Cache Mounts

RUN --mount=type=cache,target=/var/cache/apk \
    apk add --no-cache postgresql-dev

Bénéfice : Réduction temps build de 40-60%
Source : https://docs.docker.com/build/cache/

BuildKit Secrets

RUN --mount=type=secret,id=composer_token \
    COMPOSER_AUTH="$(cat /run/secrets/composer_token)" composer install

Bénéfice : Aucun secret dans l'image finale
Source : https://docs.docker.com/build/building/secrets/

Multi-Stage Builds

FROM php:8.4-fpm-alpine AS builder
RUN composer install

FROM php:8.4-fpm-alpine AS runtime
COPY --from=builder /app /app

Bénéfice : Réduction taille image de 60-97%
Source : https://docs.docker.com/build/building/multi-stage/

Images Distroless

FROM gcr.io/distroless/php8.4-fpm
COPY --from=builder /app /app

Bénéfice : Surface d'attaque minimale, CVE réduites de 90%
Source : https://github.com/GoogleContainerTools/distroless

Documentation Complète

Voir @.claude/references/symfony/docker.md pour architecture complète et exemples.

---name: docker-hadolintdescription: Docker & Hadolint validation (2026). Use when working with Docker, containers, or validating Dockerfiles.---# Docker & Hadolint (2026)## Versions (avril 2026)- **Docker Engine** : 29.5.2 (patch sécurité, juin 2026) Source : https://docs.docker.com/engine/release-notes/29/- **Docker Compose** : Spec v5.0.0 "Mont Blanc" (champ `version:` obsolète depuis v2.40+) Source : https://www.compose-spec.io/- **Hadolint** : v2.12.0 (version stable pinnée) Source : https://github.com/hadolint/hadolint/releases/tag/v2.12.0## Validation Hadolint**TOUJOURS utiliser la version pinnée `v2.12.0`** (jamais `latest` ou sans tag).```bash# Validation Dockerfiledocker run --rm -i hadolint/hadolint:v2.12.0 < Dockerfile# Validation via Makefile (recommandé)make hadolint```## Best Practices 2026### BuildKit Cache Mounts```dockerfileRUN --mount=type=cache,target=/var/cache/apk \ apk add --no-cache postgresql-dev```**Bénéfice** : Réduction temps build de 40-60% **Source** : https://docs.docker.com/build/cache/### BuildKit Secrets```dockerfileRUN --mount=type=secret,id=composer_token \ COMPOSER_AUTH="$(cat /run/secrets/composer_token)" composer install```**Bénéfice** : Aucun secret dans l'image finale **Source** : https://docs.docker.com/build/building/secrets/### Multi-Stage Builds```dockerfileFROM php:8.4-fpm-alpine AS builderRUN composer installFROM php:8.4-fpm-alpine AS runtimeCOPY --from=builder /app /app```**Bénéfice** : Réduction taille image de 60-97% **Source** : https://docs.docker.com/build/building/multi-stage/### Images Distroless```dockerfileFROM gcr.io/distroless/php8.4-fpmCOPY --from=builder /app /app```**Bénéfice** : Surface d'attaque minimale, CVE réduites de 90% **Source** : https://github.com/GoogleContainerTools/distroless## Documentation ComplèteVoir `@.claude/references/symfony/docker.md` pour architecture complète et exemples.

Frequently asked questions

Docker Hadolint