From ac78523ab28bbb114a3a4b8b574213371846a6fd Mon Sep 17 00:00:00 2001 From: "John L. Villalovos" Date: Sat, 10 Oct 2026 09:26:17 -0700 Subject: [PATCH] fix(dockerfile): ignore hadolint DL3066 on USER instruction hadolint 2.15.x adds rule DL3066, which flags a non-numeric user in the USER instruction because the name may not be resolvable by the host system. The rule is info severity, but hadolint-action's default failure-threshold is info, so it fails the "Lint Dockerfile" job. This blocks the Dependabot bump of hadolint/hadolint-action from 3.3.0 to 3.5.0 (#220). Keep `USER www-data:root` and suppress the rule with an inline `# hadolint ignore=DL3066` pragma. The www-data user and root group always exist in the Debian-based php:*-apache base image, and the names are more readable than their numeric IDs. Assisted-by: Claude Opus 5.5 --- Dockerfile | 1 + 1 file changed, 1 insertion(+) diff --git a/Dockerfile b/Dockerfile index 0f94194..f5b1c06 100644 --- a/Dockerfile +++ b/Dockerfile @@ -58,6 +58,7 @@ ENV DEBIAN_FRONTEND=noninteractive RUN bash /usr/local/bin/build_sys.sh # Customize the image environment +# hadolint ignore=DL3066 USER www-data:root VOLUME /config ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]