chore: add hadolint to pre-commit hooks

koki-develop · claude · koki-develop · commit 61ff22ef921b · 2026-03-10T20:31:55.000+09:00
Co-Authored-By: Claude &lt;noreply@anthropic.com&gt;
diff --git a/.hadolint.yaml b/.hadolint.yaml
@@ -0,0 +1,7 @@
+ignored:
+  # apt packages don't need version pinning — base images are SHA-pinned
+  - DL3008
+  # cd in subshell is intentional (one-shot commands, not directory state)
+  - DL3003
+  # Consecutive RUN instructions are intentional for Docker layer caching
+  - DL3059
diff --git a/lefthook.yml b/lefthook.yml
@@ -10,6 +10,9 @@ pre-commit:
     gitleaks:
       glob: "**/*"
       run: gitleaks git --pre-commit --staged
+    hadolint:
+      glob: "Dockerfile"
+      run: hadolint {staged_files}
 
 pre-push:
   commands:
