How do we perform static code analysis of a Dockerfile, in the course we just ta . . .

Rockford:
How do we perform static code analysis of a Dockerfile, in the course we just talk about kube manifest.

Rockford:
@Mumshad Mannambeth help would be appreciated.

Rockford:
And I am asking with respect to exam, in general we use different stuff.

Mohamed Ayman:
there are two ways to do static analysis of the Dockerfile.

using FromLatest
using Hadolint
Option#2 is mostly preferable since this can be used as an automated process inside CICD pipelines.

Rockford:
Thank you @Mohamed Ayman

Deepak Ladwa:
@Mohamed Ayman @Rockford Is this part of CKS curriculum?

Jia:
if this comes in exam, are these packages pre-installed ?