apt-get upgrade can be ok in Dockerfile

[ioggstream]

Discussion

I found this very interesting PoV https://pythonspeed.com/articles/security-updates-in-docker/ that made it into Hadolint rules.

I suggest to replace the no update rule with a no dist-upgrade rule. See https://github.com/hadolint/hadolint/issues/562