AvailableRuns in your browserFree
Docker Production Auditor
Applies a set of static rules covering image provenance, build reproducibility, runtime user, signal handling, layer hygiene, and secret exposure. Each finding explains the failure mode it prevents rather than just naming a rule.
docker production auditorRuns in your browser
Paste a Dockerfile. Findings explain the failure mode each rule prevents rather than just naming the rule.
Nothing is uploaded.
What this tool checks
- Base image tagging, pinning, and digest provenance
- Whether the container would run as root
- Secrets exposed through ENV or ARG
- Package manager cache and layer hygiene
- Signal handling: shell form versus exec form
- Layer cache ordering for dependency installs
- ADD used where COPY belongs, and remote fetches without verification
- Health checks and exposed ports
What it does
- Detects unpinned base images and floating tags
- Flags containers that would run as root
- Identifies secrets exposed through ENV or ARG
- Catches package-manager cache and layer hygiene problems
- Checks signal handling, health checks, and build context risks
What it does not do
- Static analysis of Dockerfile text; it does not build or run the image
- Cannot see your base image contents, so provenance findings are advisory
Newsletter
Inside The AI Stack Brief
A practical weekly briefing on AI engineering, infrastructure, production operations, and the technologies powering the AI stack.
One email a week. No sponsorship placements inside the technical sections. Unsubscribe in one click.