Back to Tools & Cheatsheets
Security & Performance Scanner
Dockerfile Linter & Optimizer
Scan your Dockerfiles for security vulnerabilities, excessive image layer bloat, and cache invalidation bottlenecks.
Dockerfile
Best-Practice Audit
Explicit Base Image Tag
Using explicit version tags ensures deterministic, reproducible builds.
Non-Root User
Specifies a non-root user (USER), mitigating container escape privileges.
Multi-Stage Build
Multi-stage build detected. Compilers and build tools are stripped from final image.
npm ci over npm install
Uses 'npm ci' for fast, reproducible lockfile-enforced dependency installation.