docker-patterns

Review Dockerfiles and docker-compose configurations for security and performance.

1|1|Updated Mar 26, 2026
One-click install
npx skills add https://github.com/PedroHBO/opencode-config-skills --skill docker-patterns-pedrohbo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: docker-patterns
Source: https://github.com/PedroHBO/opencode-config-skills/tree/main/skills/docker-patterns
Command: npx skills add https://github.com/PedroHBO/opencode-config-skills --skill docker-patterns-pedrohbo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Docker pattern adoption can be error-prone and time-consuming; this skill guides developers to review, optimize, and secure Dockerfiles, Compose files, and orchestration patterns.

Core Features & Use Cases

  • Dockerfile Best Practices
  • Multi-stage builds and image optimization
  • Docker Compose security and network isolation
  • CI/CD integration, debugging, and operational workflows
  • OpenCode usage examples for practical scenarios

Quick Start

Provide a Dockerfile or docker-compose configuration and ask for a security review and size optimization.

Frequently Asked Questions about docker-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I optimize Dockerfile size using multi-stage builds?

Docker Compose network isolation secures multi-service stacks by segmenting containers into distinct networks and managing secrets via Docker secrets. This Skill reviews your Compose configurations to enforce resource limits, healthchecks, and proper network isolation.

What's the best way to secure Docker containers for production deployment?

Securing Docker containers for production involves applying pinned base images, non-root users, HEALTHCHECKs, and secrets management. This Skill reviews your Dockerfiles and Compose files to enforce these best practices and integrate vulnerability scanning.

Does this Docker review tool work with Python and Go multi-service stacks?

Yes, this Docker review tool works with Node.js, Python, Go, and multi-service stacks. It analyzes your Dockerfiles and docker-compose configurations to optimize base image selection, healthchecks, and deployment pipelines across these environments.

Why do I need a .dockerignore file and how does it affect image optimization?

A .dockerignore file affects image optimization by excluding unnecessary files from the build context, reducing build time and image size. This Skill checks for .dockerignore usage alongside multi-stage builds and resource limits to optimize your containers.

How to add vulnerability scanning integration to a Docker CI/CD pipeline?

Adding vulnerability scanning integration to a Docker CI/CD pipeline requires analyzing your Dockerfiles and Compose configurations for security gaps. This Skill reviews your setup to enforce scanning, secrets management, and healthchecks within deployment workflows.