implement hadolint

[manuel-sommer]

Implement a github action for hadolint when you do a change in your PR in a dockerfile.

https://github.com/jbergstroem/hadolint-gh-action/blob/main/USAGE.md

[dryrunsecurity]

Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.

DryRun Security	Status	Findings
Sensitive Functions Analyzer	✅	0 findings
Configured Sensitive Files Analyzer	✅	0 findings
Sensitive Files Analyzer	✅	0 findings

Note

🟢 Risk threshold not exceeded.

Tip

Get answers to your security questions. Add a comment in this PR starting with @DryRunSecurity. For example...

@dryrunsecurity What are common security issues with web application cookies?

Powered by DryRun Security

[manuel-sommer]

Reminder, do we want to implement this @mtesauro and @Maffooch ?

[mtesauro]

@manuel-sommer I'd like to wait at least until after 2.38.0 so that we no longer have MySQL and RabbitMQ in play and the dockerfiles have been adjusted for those deprecations.

I'm trying to avoid double work if possible.

[manuel-sommer]

Reminder @mtesauro

[Maffooch]

Let's reopen this after the image hardening and simplification is completed