auditing

You can audit Docker configurations for security and production readiness by running this Skill against your Dockerfile and docker-compose.yml files. It checks for non-root users, secrets in ENV, multi-stage builds, cache mounts, HEALTHCHECK, and restart policies.

Common security vulnerabilities to check in a Dockerfile include running containers as root and storing secrets in ENV variables. This Skill identifies these issues and provides automated fixes to enforce non-root users and secure secret management.

To optimize Docker performance with multi-stage builds and cache mounts, this Skill reviews your Dockerfile and provides actionable recommendations. It identifies missing performance optimizations and offers options to automatically apply fixes based on severity.

Yes, you can automatically fix Dockerfile issues identified during an audit. This Skill provides user interaction for fix application, allowing you to selectively apply automated fixes for security, performance, and production readiness issues based on their severity.

Yes, this Docker auditing tool supports glob patterns for file discovery. You can use glob patterns to locate and audit multiple Dockerfile and docker-compose.yml configurations across your project directories before deployment.

Production readiness checks a docker-compose.yml should include involve HEALTHCHECK definitions and restart policies. This Skill audits your docker-compose.yml configurations against these checklists to ensure your services are ready for a production environment.