Analyze your Dockerfile for security issues and best practice violations
This tool analyzes your Dockerfile for security issues, outdated base images, exposed secrets, and violations of Docker best practices based on CIS Docker Benchmarks.
Checks for outdated or end-of-life base images that may have unpatched vulnerabilities.
Identifies potential secrets, API keys, or passwords hardcoded in ENV instructions.
Detects containers running as root and recommends using non-root users.
Checks for ADD vs COPY misuse, curl pipe to shell, and other security anti-patterns.
Encode, decode, measure sizes, and transform common formats.