openauditB85out of 100: openaudit's audit of itself
container.hadolint

Hadolint

Runs hadolint on Dockerfiles: Dockerfile best practices plus ShellCheck on RUN instructions.

Engine
Wrapped scanner
Wraps
hadolint
Targets
Container
Areas
Best practices, Security
Runs
By default, when the target applies
Network
Only the target itself

Run only this auditor

bunx openaudit image:nginx:1.27 --only container.hadolint

Wraps hadolint. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.