Merge pull request 'fix: use JSON notation for HEALTHCHECK CMD (DL3025)' (#15) from fix/hadolint-DL3025-healthcheck-json into main

Reviewed-on: #15

.gitea/workflows/cron.yaml

@@ -29,7 +29,7 @@ jobs:
         with:
           fetch-depth: 0
       - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
-      - uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4
+      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}

.gitea/workflows/tag.yaml

@@ -27,7 +27,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
-      - uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4
+      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}

Dockerfile

@@ -82,13 +82,13 @@ ENV HERMES_WEBUI_AGENT_DIR=/opt/hermes-agent \
 RUN useradd --create-home --shell /bin/bash hermes \
     && mkdir -p /workspace \
     && chown -R hermes:hermes /app /opt/venv /opt/hermes-agent /workspace /home/hermes
-
+# hadolint ignore=DL3066
 USER hermes
 
 EXPOSE 8787
 
 HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=3 \
-    CMD curl -f http://localhost:8787/health || exit 1
+    CMD ["curl", "-f", "http://localhost:8787/health"]
 
 # Run the WebUI server (which runs Hermes Agent in-process)
 CMD ["python", "/app/server.py"]