• This is a bug report
• This is a feature request
• I searched existing issues before opening this one

Expected behavior

Running HADOLINT_TRUSTED_REGISTRIES="something" hadolint Dockerfile is equivalent to hadolint --trusted-registry something Dockerfile.

Actual behavior

Setting HADOLINT_TRUSTED_REGISTRIES has no effect.

Steps to reproduce the behavior

The README mentions that this environment variable can be used in lieu of --trusted-registry:

In addition to config files, Hadolint can be configured with environment variables.

HADOLINT_TRUSTED_REGISTRIES              # comma separated list of registry urls

I glanced at Environment.hs and it looks like it's checking for HADOLINT_ALLOWED_REGISTRIES instead.

I'm happy to open a PR for this, just not sure in which direction it should be fixed. Probably the environment variable and README should be updated?

Hadolint version:

Haskell Dockerfile Linter v2.8.0-0-g398770f-dirty