Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`

Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check

`COPY` to a relative destination without `WORKDIR` set.

Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check

Use WORKDIR to switch to a directory

Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`

Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check

Use WORKDIR to switch to a directory

Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check

Use WORKDIR to switch to a directory

Avoid additional packages by specifying `--no-install-recommends`

Delete the apt-get lists after installing something

Multiple consecutive `RUN` instructions. Consider consolidation.