diff --git a/.hadolint.yaml b/.hadolint.yaml
new file mode 100644
index 0000000..f3991ca
--- /dev/null
+++ b/.hadolint.yaml
@@ -0,0 +1,4 @@
+# DL3008: pinning apt package versions is impractical for system tools (nmap, iputils-ping)
+# that have version numbers tied to specific Debian releases.
+ignore:
+  - DL3008