Hadolint Processor

Purpose

Lints Dockerfiles using Hadolint.

The Rust alternative is idockerfile: hadolint’s DL rules, pragmas and .hadolint.yaml, in-process, with hadolint’s messages and exit rule. Switching is hadolint → idockerfile in the stanza header. It does not run ShellCheck, so a repo that wants the SC findings on its RUN scripts stays here.

How It Works

Discovers Dockerfile files in the project (excluding common build tool directories), runs hadolint on each file, and records success in the cache. A non-zero exit code from hadolint fails the product.

This processor supports batch mode.

Source Files

• Input: **/Dockerfile
• Output: none (checker)

Configuration

[processor.checker.hadolint]
args = []
dep_inputs = []

Batch support

The tool accepts multiple files on the command line. When batching is enabled (default), rsconstruct passes all files in a single invocation for better performance.

Clean behavior

This processor is a Checker — rsconstruct clean outputs is a no-op for it (checkers produce no outputs). See Clean behavior and rsconstruct clean.