Like https://github.com/hadolint/hadolint and read https://snyk.io/blog/10-docker-image-security-best-practices/