DevSecOps · hands-on lab
DevSecOps Lab 04: Container Security with hadolint
Lint a Dockerfile with hadolint and fix the security and build problems until the error-level gate passes.
- 35 minutesTime in the lab
- intermediateLevel
- 2 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
Scenario. The team's Dockerfile pulls :latest, uses ADD, and runs as root. You harden it with hadolint until the pipeline's error-level gate is clean.
What you will do
- Lint the Dockerfile
- Harden the Dockerfile
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.