Dockerfile Linter & Security Auditor
Inspect Dockerfiles for security risks, unpinned base images, root execution, uncleaned package caches, and layer bloat.
Frequently Asked Questions
What rules are evaluated?
The static analysis engine checks 12 essential container standards: unpinned base images, root user execution, uncleaned package caches (apt-get/apk), ADD instead of COPY, shell form CMD/ENTRYPOINT, and missing WORKDIR.
How does chaining RUN commands reduce image size?
Each RUN statement creates an immutable layer in the Docker storage driver. Installing packages and cleaning temporary caches in separate RUN instructions leaves deleted files trapped in previous layers, increasing overall image size.
What is multi-stage building?
Multi-stage builds use multiple FROM statements. A builder stage compiles source code, and only the resulting binary or production bundle is copied into a minimal runtime image, reducing attack surface and final image size.
Is my Dockerfile sent to any remote server?
No. 100% of lexical parsing and rule auditing executes inside your browser tab.