See the post here: Using Hadolint, a Dockerfile linter, To Enforce Best Practices