Skip to content
IT_TOOLS_

/Dockerfile Security Linter

Review Dockerfiles for unsafe base images, privilege, secrets and supply-chain risks.

Local processing

This tool processes your input in your browser.

Command Palette

Search for a command to run...

Input

Analysis runs locally in your browser. Do not paste live secrets into shared screens.

Findings

Paste a configuration to begin

No configuration loaded.

high · Container runs as root

No non-root USER instruction was detected.

Remediation: Create a dedicated UID/GID and finish the image with USER.