Perhaps we need some safeguards around the use of hadolint, in case it is sensitive to platform/libc versions etc?