- [Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`](https://github.com/hadolint/hadolint/wiki/DL3008) - [Avoid additional packages by specifying `--no-install-recommends`](https://github.com/hadolint/hadolint/wiki/DL3015) - [Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>`](https://github.com/hadolint/hadolint/wiki/DL3013) - [which is non-standard. Use builtin 'command -v' instead.](https://github.com/koalaman/shellcheck/wiki/SC2230) - Reduce the final size of the image