On: Dockerfile Best Practices

[captn3m0]

I suggest running hadolint, which scans for most of this.

[vsupalov → captn3m0]

+1 for hadolint. There's also https://github.com/goodwithtech/dockle and https://github.com/aquasecurity/trivy if you want more security emphasis.