Optimizes Dockerfiles for security, size, and performance using multi-stage builds and minimal base images.
This skill automates the validation and configuration of Dockerfiles to ensure they adhere to modern industry best practices. It detects project types like Node.js, Python, Go, and Rust to implement multi-stage builds, non-root user execution, and minimal Alpine or slim base images. Whether you're auditing an existing configuration or generating a new one, it helps reduce image attack surfaces, optimize CI/CD caching, and ensure production-readiness with proper OCI labels and health checks.
主要功能
01Security hardening through mandatory non-root user configuration
0210 GitHub stars
03Multi-stage build implementation to minimize production image size
04Automatic project type detection for Node.js, Python, Go, and Rust
05Real-time base image version verification via web search
06OCI label integration for better container metadata and GHCR support
使用场景
01Converting legacy single-stage Dockerfiles to optimized multi-stage versions
02Auditing existing Dockerfiles for security vulnerabilities and image bloat
03Standardizing container metadata and health checks across various microservices
