Simplify container image attestation #2397

	name: Hadolint

	on: [
	push,
	pull_request
	]

	jobs:
	hadolint:
	name: Validate Dockerfile syntax
	runs-on: ubuntu-24.04
	timeout-minutes: 30
	steps:
	# Checkout the repo
	- name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
	# End Checkout the repo

	# Start Docker Buildx
	- name: Setup Docker Buildx
	uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
	# https://github.com/moby/buildkit/issues/3969
	# Also set max parallelism to 2, the default of 4 breaks GitHub Actions and causes OOMKills
	with:
	buildkitd-config-inline: \|
	[worker.oci]
	max-parallelism = 2
	driver-opts: \|
	network=host

	# Download hadolint - https://github.com/hadolint/hadolint/releases
	- name: Download hadolint
	shell: bash
	run: \|
	sudo curl -L https://github.com/hadolint/hadolint/releases/download/v${HADOLINT_VERSION}/hadolint-$(uname -s)-$(uname -m) -o /usr/local/bin/hadolint && \
	sudo chmod +x /usr/local/bin/hadolint
	env:
	HADOLINT_VERSION: 2.12.0
	# End Download hadolint

	# Test Dockerfiles with hadolint
	- name: Run hadolint
	shell: bash
	run: hadolint docker/Dockerfile.{debian,alpine}
	# End Test Dockerfiles with hadolint

	# Test Dockerfiles with docker build checks
	- name: Run docker build check
	shell: bash
	run: \|
	echo "Checking docker/Dockerfile.debian"
	docker build --check . -f docker/Dockerfile.debian
	echo "Checking docker/Dockerfile.alpine"
	docker build --check . -f docker/Dockerfile.alpine
	# End Test Dockerfiles with docker build checks

Provide feedback