Does this skill require pre-installed tools like hadolint or Checkov?

No, the skill includes a self-contained script that automatically detects, installs, and cleans up these tools in temporary environments if they are not already present on your system.

What kind of security vulnerabilities can it detect?

It uses over 50 security policies to check for root user execution, exposed ports like SSH, hardcoded secrets, and missing health checks.

How does the skill help with image size optimization?

It analyzes your Dockerfile for layer efficiency, multi-stage build opportunities, and unnecessary package manager caches, providing specific recommendations to reduce the final image footprint.

Is it safe to run in a local development environment?

Yes, it uses a bash trap mechanism to ensure that any temporary files or virtual environments are completely removed upon exit, regardless of whether the validation succeeded or failed.

Can it handle custom Dockerfile names like Dockerfile.prod?

Yes, it is designed to validate any Dockerfile variant, including environment-specific files and multi-stage configurations.

Dockerfile Validator

Name: Dockerfile Validator
Author: akin-ozer

byakin-ozer

•

デプロイメントとDevOps

Validates, lints, and secures Dockerfiles to ensure industry best practices and optimal container build performance.

The Dockerfile Validator is a comprehensive toolkit designed to streamline the containerization workflow within Claude Code. It automates multi-stage validation by integrating industry-standard tools like hadolint for syntax linting and Checkov for security policy enforcement. Beyond basic checks, it analyzes Dockerfiles for build optimization, layer efficiency, and adherence to official best practices, helping developers create smaller, faster, and more secure container images without needing to manually install or configure complex toolchains.

主な機能

01Zero-configuration execution with automatic tool installation and environment cleanup

0266 GitHub stars

03Automated syntax validation using hadolint and ShellCheck integration

04Security scanning for misconfigurations and hardcoded secrets with Checkov

05Build optimization analysis for layer efficiency and image size reduction

06Enforcement of Docker best practices including non-root users and version pinning

ユースケース

01Ensuring new Dockerfiles follow team standards before committing to version control

02Debugging complex Dockerfile syntax errors and build failures during development

03Auditing existing Dockerfiles for security vulnerabilities and performance bottlenecks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add akin-ozer/cc-devops-skills dockerfile-validator

For use in Claude.ai and ChatGPT

Download Skill