chore: improved pre-commit settings

.hadolint.yaml

@@ -5,5 +5,6 @@ override:
   style:
     - DL3006  # always tag the version of an image explicitly
     - DL3008  # pin versions in apt get install
+    - DL3013  # pin versions in pip
     - DL3015  # avoid additional packages by specifying `--no-install-recommends`
     - DL3018  # pin versions in apk add

.pre-commit-config.yaml

@@ -12,6 +12,7 @@ repos:
       - id: end-of-file-fixer
       - id: check-json
       - id: check-yaml
+        args: [--allow-multiple-documents]
       - id: check-added-large-files
   - repo: https://github.com/markdownlint/markdownlint
     rev: v0.12.0

.yamllint.yaml

@@ -3,6 +3,7 @@
 # more information
 
 extends: default
+
 rules:
   line-length:
     allow-non-breakable-inline-mappings: true

examples/kubernetes/create an admission webhook/Dockerfile

@@ -1,8 +1,8 @@
 FROM python:alpine
 
 RUN pip3 --no-cache-dir install flask jsonpatch
-ADD webhook.py /
+COPY webhook.py /
 
 USER nobody
 EXPOSE 8080
-ENTRYPOINT python3 /webhook.py
+ENTRYPOINT [ "python3", "/webhook.py" ]