Add dockerfile-lint

docker/pipeline-jobs/docker-compose-dockerfile-lint.yml

@@ -10,6 +10,7 @@ services:
       - SCRIPTS_DIR=${BASE_SCRIPTS_DIR}/dockerfile-lint
       - SCAN_DIR=/app
       - CI_JOB_NAME=dockerfile-lint<<subProject>>
+      - DOCKERFILE_LOC=Dockerfile
     volumes:
       - ./:/root
       - ./<<projectName>><<subProject>>:/app

formulas/baselines/universal.yml

@@ -5,6 +5,8 @@ pipeline:
   pipelineJobs:
     trufflehog:
       composeFile: docker/pipeline-jobs/docker-compose-trufflehog.yml
+    dockerfile-lint:
+      composeFile: docker/pipeline-jobs/docker-compose-dockerfile-lint.yml
 
 getLocalDevDirs:
   - from: root
@@ -13,6 +15,8 @@ getLocalDevDirs:
     to: config
   - from: scripts/trufflehog
     to: scripts/trufflehog
+  - from: scripts/dockerfile-lint
+    to: scripts/dockerfile-lint
 
 getLocalDevFiles:
   - from: scripts/setup.sh

scripts/dockerfile-lint/entrypoint.sh

-'${SCRIPTS_DIR}/monitor/monitorstatus.sh -j ${CI_JOB_NAME} -s fail -r config -l "Job URL: ${CI_JOB_URL}"'
-echo "removing any existing hadolint config."
-rm -rf .config/hadolint.yml .config/hadolint.yaml
-hadolint $APPROVED_REGISTRY $DOCKERFILE_LOC --failure-threshold warning | tee ${REPORTS_DIR}/${CI_JOB_NAME}.out
+#!/bin/bash
+
+mkdir -p ${REPORTS_DIR}
+rm -f ${REPORTS_DIR}/*
+${SCRIPTS_DIR}/monitorstatus.sh -j ${CI_JOB_NAME} -s fail -r config -l "Job run in local dev"
+set -o pipefail
+hadolint $APPROVED_REGISTRY $SCAN_DIR/$DOCKERFILE_LOC --failure-threshold warning | tee ${REPORTS_DIR}/${CI_JOB_NAME}.out
 
 if [ "$?" == "0" ]; then
   ${SCRIPTS_DIR}/monitorstatus.sh -j ${CI_JOB_NAME} -s pass -r pass
 else
   if [ -s "${REPORTS_DIR}/${CI_JOB_NAME}.out" ]; then
-    ${SCRIPTS_DIR}/monitor/monitorstatus.sh -j ${CI_JOB_NAME} -r findings -l "${CI_JOB_NAME} process found findings, check job for details"
+    ${SCRIPTS_DIR}/monitorstatus.sh -j ${CI_JOB_NAME} -r findings -l "${CI_JOB_NAME} process found findings, check job for details"
   fi
   exit 1
 fi

scripts/dockerfile-lint/monitorstatus.sh

 #!/bin/bash
 
-LOG_DIR="${REPORTS_DIR}"
+LOG_DIR="${REPORTS_DIR}/"
 LOG_NAME="monitor_status"
 LOG_EXT=".yaml"
 LOG_FILE="${LOG_DIR}${LOG_NAME}${LOG_EXT}"