skills.rest
devkeni
devkeniCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

dockerfile-validator

Automates Dockerfile validation and security auditing using Hadolint and Checkov.

1|Updated Mar 27, 2026
Search Tags:#security#validation#dockerfile#ci-cd#lint#hadolint#checkov
One-click install
npx skills add https://github.com/devkeni/Skills --skill dockerfile-validator-devkeni
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dockerfile-validator
Source: https://github.com/devkeni/Skills/tree/main/backend-devops/dockerfile-validator
Command: npx skills add https://github.com/devkeni/Skills --skill dockerfile-validator-devkeni

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires hadolint, checkov, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Validate Dockerfiles for syntax correctness, security concerns, and adherence to best practices.

Core Features & Use Cases

  • Deterministic validation workflow with preflight checks, on-demand tool installation, and deterministic output reporting.
  • Linting and security scanning using Hadolint and Checkov to surface issues before merging.
  • Suitable for CI/CD pipelines, code reviews, and local development to harden Docker images and speed up secure deployments.

Quick Start

Run the validator on your Dockerfile to perform linting, security checks, and best-practices validation.

Frequently Asked Questions about dockerfile-validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Dockerfile linting and security checks in a CI/CD pipeline?▼

Automate Dockerfile validation by running linting and security scanning to flag syntax and hardening issues before merging. This workflow enforces deterministic execution with preflight checks and standardized severity reporting for CI/CD pipelines.

What is the best way to validate Dockerfiles for security concerns and best practices?▼

Validate Dockerfiles for security concerns and best practices by running automated linting and security scanning. This surfaces syntax correctness and hardening issues using Hadolint and Checkov to ensure secure Docker images.

Do I need Hadolint and Checkov installed to run Dockerfile validation?▼

You do not need Hadolint and Checkov pre-installed to run Dockerfile validation. The validator handles on-demand tool installation and includes tool fallback handling to ensure deterministic execution and reporting.

Can I use automated Dockerfile auditing for local development and code reviews?▼

You can use automated Dockerfile auditing for local development and code reviews to harden Docker images. It performs preflight checks and standardized severity reporting to speed up secure deployments locally and during peer review.

Hadolint vs Checkov for Dockerfile scanning: which approach does this validation workflow use?▼

This validation workflow uses both Hadolint for Dockerfile linting and Checkov for security scanning. Combining these dependencies provides deterministic validation that surfaces both syntax correctness and infrastructure hardening issues.

Related Skills

Explore More Software Engineering Skills→
andregusman-raizandregusman-raiz
19

ag-preparar-ambiente

Provision local development and CI/CD environments with Docker and pipeline scaffolding.

Community
Intermediate
mcgilly17mcgilly17
2

Docker Patterns

Create multi-stage Dockerfiles with non-root users and minimal base images.

Community
Advanced
shakhovskiya-createshakhovskiya-create

deploy-audit

Audit CI/CD pipelines and infrastructure configurations for security and reliability.

Community
Advanced
InnerScopeHearingInnerScopeHearing

sast-configuration

Automate SAST tool setup, custom rule creation, and CI/CD integration.

Official
Advanced