docker-check

Docker-check audits your Dockerfile and docker-compose configurations to detect security gaps, misconfigurations, and optimization opportunities. It scans for multi-stage builds, HEALTHCHECK directives, non-root user setup, .dockerignore presence, unnecessary packages, build-time secrets exposure, and base image choices, then generates a structured report with findings and actionable recommendations.

The tool validates multi-stage builds to reduce image size, HEALTHCHECK presence for container health monitoring, non-root user configuration for security, .dockerignore files to exclude unnecessary files, minimal base images (slim or alpine variants), and removal of unnecessary packages. It flags misconfigurations and provides remediation guidance.

Yes. Docker-check analyzes both Dockerfiles and docker-compose.yaml files at the repository level, auditing your complete Docker setup including service configurations, and produces a unified Docker Health Report with findings across all configurations.

Docker-check generates a remediation-ready Docker Health Report containing findings with severity levels and actionable recommendations. The report is structured to highlight security gaps, performance bottlenecks, and optimization opportunities specific to your configurations.

The tool produces recommendations targeting practitioners already working with Docker configurations. Understanding Dockerfile syntax, docker-compose structure, and basic container security concepts helps you act on findings, though the report itself flags specific issues with clear remediation steps.