Merge pull request #133 from BigMichi1/dependabot/github_actions/acti… #425

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.
	# hadoint is a Dockerfile linter written in Haskell
	# that helps you build best practice Docker images.
	# More details at https://github.com/hadolint/hadolint

	name: Hadolint

	on:
	push:
	branches: [ main ]
	pull_request:
	# The branches below must be a subset of the branches above
	branches: [ main ]
	schedule:
	- cron: '42 5 * * 1'

	permissions:
	contents: read

	jobs:
	hadolint:
	name: Run hadolint scanning
	runs-on: ubuntu-latest
	permissions:
	contents: read # for actions/checkout to fetch code
	security-events: write # for github/codeql-action/upload-sarif to upload SARIF results

	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
	with:
	egress-policy: audit

	- name: Checkout code
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Run hadolint
	uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf
	with:
	dockerfile: ./Dockerfile
	format: sarif
	output-file: hadolint-results.sarif
	no-fail: true

	- name: Upload analysis results to GitHub
	uses: github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
	with:
	sarif_file: hadolint-results.sarif
	wait-for-processing: true

Provide feedback