diff --git a/.hadolint.yaml b/.hadolint.yaml
new file mode 100644
index 0000000..1b65cf1
--- /dev/null
+++ b/.hadolint.yaml
@@ -0,0 +1,9 @@
+ignored:
+  - DL3005 # Package upgrades
+  - DL3017 # Package upgrades
+  - DL3006 # Version tagging
+  - DL3008 # Pinning
+  - DL3018 # Pinning
+  - DL4006 # Pipefail
+  - SC2006 # Quoting
+  - SC2016 # Quoting
diff --git a/Dockerfile b/Dockerfile
index 53bb528..efe13e6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -25,6 +25,7 @@ CMD ["/entrypoint.py"]
 ENTRYPOINT ["/usr/bin/tini", "--"]
 
 RUN apt-get update \
+    && apt-get upgrade -y \
     && apt-get install -y --no-install-recommends fontconfig fonts-noto python3 python3-jinja2 tini \
     && apt-get clean autoclean && apt-get autoremove -y && rm -rf /var/lib/apt/lists/*
 
diff --git a/Dockerfile-alpine b/Dockerfile-alpine
index c7367bf..7b77ee3 100644
--- a/Dockerfile-alpine
+++ b/Dockerfile-alpine
@@ -23,6 +23,7 @@ CMD ["/entrypoint.py"]
 ENTRYPOINT ["/sbin/tini", "--"]
 
 RUN apk update \
+    && apk upgrade \
     && apk add --no-cache ca-certificates wget curl openssh bash procps openssl perl tini python3 py3-jinja2 ttf-dejavu `apk search -qe 'font-noto*'` \
     && rm -f /var/cache/apk/APKINDEX*