dockerfile-validator

Dockerfile validation checks syntax correctness, security configurations, and adherence to best practices to detect insecure layering. It applies to local development, CI pipelines, and code reviews to ensure faster secure builds.

Dockerfile security scanning integrates hadolint for syntax checking and checkov for security scanning. The validator auto-installs these tools if not present, running deterministic checks to produce severity-based findings.

Linting Dockerfiles in a CI pipeline requires deterministic validation that processes files from a repo root to detect insecure configurations. It generates structured reports with severity-based findings and guidance for fixes.

Dockerfile validation can run locally without manual setup by auto-installing required tools like hadolint and checkov. It includes optional fallback behaviors when tools are unavailable, ensuring deterministic execution.

A Dockerfile validator provides deterministic security and best-practices checks that manual reviews miss, detecting syntax issues and poor layering. It produces structured reports with guidance for fixes, ensuring reliable deployments.

Dockerfile validation requires Python3 as a dependency alongside auto-installed tools like hadolint and checkov. It processes Dockerfiles from a repository root to generate structured, severity-based reports.