.hadolint.yaml config is ignored

[jornfranke]

• This is a bug report
• This is a feature request
• I searched existing issues before opening this one

Expected behavior

hadolint reads the file .hadoolint.yaml and applies the options. E.g. in this case it should especially consider output format "format" in it.

Actual behavior

hadolint ignores at least the option "format" in the yaml, but most likely all options. If I provide a non-existing file then it complains that it cannot read the file, so I assume it finds the file and content.
If I provide the format via the -f flag then it is correctly produced.

Steps to reproduce the behavior

hadolint -c ./hadolint.yaml Dockerfile

Use the following file ./hadolint.yaml

failure-threshold: "ignore"
format: "gitlab_codeclimate"
no-color: false
no-fail: true
strict-labels: true
disable-ignore-pragma: false
trustedRegistries:
    - "internal"
    - "internal2"

It will not output the issues in "gitlab_codeclimate" format, but the default tty.

hadolint version: 2.8.0
OS: Linux
Gitlab Runner: 14.7.0

[codezninja]

Seems like this broke in 2.8.0. Using version 2.7.0 seems to read the config properly. When I used the -V option I can see that hadolint reads the config file but it doesn't load any of the values. I see some values being loaded like failure threshold

---
failure-threshold: error  # name of threshold level (error | warning | info | style | ignore | none)
trustedRegistries:
  - fail.docker.com

$ hadolint -V -c $(pwd)/.hadolint.yaml Dockerfile
"Configuration file used: /Users/username/Repos/Test/.hadolint.yaml"
Configuration:
  no fail: False
  no color: False
  output format: tty
  failure threshold: error
  override error:
    none
  override warning:
    none
  override info:
    none
  override style:
    none
  override ignore:
    none
  strict labels: False
  label schema:
    none
  allowed registries:
    none

[m-ildefons]

Hi,
thanks for reporting this bug. I believe this is actually the issue described here and fixed here.

[jornfranke]

It is not only trustedregistries - it seems everything in the config is ignored

[codezninja]

@jornfranke it's actually only a few things from what I can tell. failure-threshold worked for me in the above example.

[huornlmj]

Also reporting failure-threshold not working correctly. The following within .hadolint.yaml...

failure-threshold:
        - info

yields...

"Error parsing your config file in  'REDACTED/.hadolint.yaml':\nIt should contain one of the keys 'override', 'ignored'\nor 'trustedRegistries'. For example:\n\nignored:\n\t- DL3000\n\t- SC1099\n\n\nThe key 'override' should contain only lists with names 'error',\n'warning', 'info' or 'style', which each name rules to override the\nseverity on. For example:\n\noverride:\n\terror:\n\t\t- DL3008\n\n\nThe key 'trustedRegistries' should contain the names of the allowed\ndocker registries:\n\ntrustedRegistries:\n\t- docker.io\n\t- my-company.com\n\nexpected severity instead of tag:yaml.org,2002:seq tagged sequence\n"

Other values in the hadolint.yaml file work fine.