From 15cd40c2b35e4edf13a263d73942bf325828a410 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 8 Aug 2026 12:01:39 +0000 Subject: [PATCH 1/2] Bump hadolint/hadolint-action from 3.3.0 to 3.4.0 Bumps [hadolint/hadolint-action](https://github.com/hadolint/hadolint-action) from 3.3.0 to 3.4.0. - [Release notes](https://github.com/hadolint/hadolint-action/releases) - [Commits](https://github.com/hadolint/hadolint-action/compare/2332a7b74a6de0dda2e2221d575162eba76ba5e5...2a66e89f53d0771bb131a7fa31f3136336094aa6) --- updated-dependencies: - dependency-name: hadolint/hadolint-action dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/_ci-docker.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/_ci-docker.yml b/.github/workflows/_ci-docker.yml index ac4659e..dabb400 100644 --- a/.github/workflows/_ci-docker.yml +++ b/.github/workflows/_ci-docker.yml @@ -47,7 +47,7 @@ jobs: persist-credentials: false - name: hadolint - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 + uses: hadolint/hadolint-action@2a66e89f53d0771bb131a7fa31f3136336094aa6 # v3.4.0 with: dockerfile: Dockerfile ignore: DL3008,DL3016,DL3041,DL3059 From e426bc37c3e716139dd3191a75d3c9438badbd6c Mon Sep 17 00:00:00 2001 From: mallowlabs Date: Sat, 8 Aug 2026 21:19:09 +0900 Subject: [PATCH 2/2] Fix DL3066 hadolint failure by using numeric root UID hadolint-action 3.4.0 bumps hadolint to v2.15.0, which adds the new DL3066 rule (non-numeric user-id). USER root at Dockerfile:79 triggers it; switching to USER 0 keeps the same behavior since root's UID is 0. Co-Authored-By: Claude Sonnet 5 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 4b57ab3..184825f 100644 --- a/Dockerfile +++ b/Dockerfile @@ -76,7 +76,7 @@ FROM public.ecr.aws/awsguru/aws-lambda-adapter:1.0.0@sha256:b4da35991627bdac98a8 # Final stage for Lambda FROM app AS lambda -USER root +USER 0 COPY --from=aws-lambda-adapter /lambda-adapter /opt/extensions/lambda-adapter RUN apt-get update -qq && \ apt-get install --no-install-recommends -y awscli jq && \