DevSecOps
Dockerfile Linter
Paste a Dockerfile to check for common issues that cause security vulnerabilities and build reproducibility problems: :latest base image tags, missing non-root USER instructions, missing HEALTHCHECK, and apt-get without --no-install-recommends.
Calculations run locally in your browserTool
About this tool
Dockerfile Linter
The Dockerfile Linter checks for :latest base image tags, missing non-root USER instructions, missing HEALTHCHECK, and other common Dockerfile security and reproducibility issues.
• Validate a Dockerfile before a PR review
• Enforce container security standards in a CI pipeline
• Check a third-party Dockerfile before using it as a base
• Document which Dockerfile checks pass for a compliance audit
Next step
Continue with Utility Matrix tools for the next decision in this workflow.
Browse tools →
FAQ
What does this tool tell you?
The Dockerfile Linter checks for :latest base image tags, missing non-root USER instructions, missing HEALTHCHECK, and other common Dockerfile security and reproducibility issues.
What affects the result most?
FROM :latest tag (non-reproducible builds). Missing USER instruction (running as root). Missing HEALTHCHECK (orchestrator cannot detect failure).
How should I use the result?
Treat the tool's output as a first-pass check, not a proof of correctness. A clean pass means no issues in the patterns this tool recognizes; a failure points to a specific problem you can investigate in your source. The underlying spec is the authoritative source for edge cases.
Related tools