diff --git a/.github/workflows/hadolint.yaml b/.github/workflows/hadolint.yaml
index b3d5987..241c073 100644
--- a/.github/workflows/hadolint.yaml
+++ b/.github/workflows/hadolint.yaml
@@ -14,4 +14,5 @@ jobs:
       - uses: hadolint/hadolint-action@v3.1.0
         with:
           dockerfile: Dockerfile
-          failure-threshold: warning
+          failure-threshold: error
+          recursive: true
diff --git a/WORKSPACE b/WORKSPACE
index 7a2ce48..fd9f8f9 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -1,7 +1,6 @@
 workspace(name = "sylius-php")
 
-load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
-load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_file")
+load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive", "http_file")
 
 http_archive(
     name = "io_bazel_rules_docker",
diff --git a/php/BUILD b/php/BUILD
index 34495b4..62ce14d 100644
--- a/php/BUILD
+++ b/php/BUILD
@@ -1,10 +1,10 @@
-package(default_visibility = ["//visibility:public"])
-
-load("@io_bazel_rules_docker//contrib:test.bzl", "container_test")
 load("@io_bazel_rules_docker//container:import.bzl", "container_import")
+load("@io_bazel_rules_docker//contrib:test.bzl", "container_test")
 load(":php-arch.bzl", "ARCHITECTURES")
 load(":php-version.bzl", "PHP_VERSION")
 
+package(default_visibility = ["//visibility:public"])
+
 [
     container_test(
         name = "php" + PHP_VERSION + "_" + arch + "_test",