All tools / Containers
Dockerfile explainer
Lint a Dockerfile and explain each instruction, including floating tags, root, ADD versus COPY, and apt layers.
Findings
Explanation
What this checks
| Instruction | What the explainer looks for |
|---|---|
FROM | Missing tag, latest, and stage names used by COPY --from |
RUN | apt-get without list cleanup, sudo, and curl piped to a shell |
ADD / COPY | ADD of local files, and --from stages that do not exist yet |
USER / CMD | Final stage still root, and shell form versus exec form |