The fix for Docker secrets syntax causing Hadolint to choke on env= has still not been released.

RUN --mount=type=secret,id=SOME_VAR,env=SOME_VAR \
    ...

This is rendering hadolint effectively unusable as it can't be used by anyone trying to secure their Docker builds, which is many of us. It also breaks downstream providers such as MegaLinter which use and support Hadolint. We use both, ironically.

The ticket reporting it (#1039) is closed, which it shouldn't be since the fix isn't live.

The release was reported as being 'soon' two months ago and still isn't out!

Requests for updates haven't been answered.

Please get this done, @lorenzo . We need it now.

Many thanks.