Generate and validate secure, deterministic Dockerfiles for CI builds.
npx skills add https://github.com/f4rkh4d/forge-skill --skill forge-dockerfile
Please help me install this Agent Skill. Skill: forge-dockerfile Source: https://github.com/f4rkh4d/forge-skill/tree/main/skills/infra/forge-dockerfile Command: npx skills add https://github.com/f4rkh4d/forge-skill --skill forge-dockerfile
It prevents AI-generated Dockerfiles from being insecure, non-deterministic, and inefficient by enforcing production-grade Dockerfile conventions that avoid common CI and runtime failures.
.dockerignore hygiene to keep builds fast and consistent.Use the Dockerfile verifier to check your Dockerfile at skills/infra/forge-dockerfile/verify/check_dockerfile.sh and fix any violations it reports.
High-intent search queries and answers about installing and using this skill.
Secure Dockerfiles use multi-stage builds to isolate runtime artifacts, enforce pinned base image tags, and reject baked-in secrets to ensure deterministic CI builds and safe production pulls.
Handling secrets in a Dockerfile requires using secret mounts instead of baking sensitive data into image layers, explicitly rejecting secret-shaped ENV or COPY instructions to prevent runtime exposure.
Yes, this Dockerfile generator provides containerization defaults and worked examples for Node, Go, Rust, and Python services, applying correct signal behavior and non-root execution across these stacks.
Docker builds fail with signal handling issues when not using exec-form CMD, which is required to ensure proper process signal behavior and non-root execution during container runtime operations.
Keeping Docker images small and reproducible requires mandatory .dockerignore hygiene, cache-friendly COPY ordering, and version-safe package installs to optimize build speed and consistency across large-scale pulls.
Validating Dockerfiles against production security standards involves running a dedicated verifier script that checks for pinned dependencies, multi-stage structures, and non-root execution to report violations.
ralvarezdevStandardize Dockerfile and Compose patterns for secure multi-stage builds.
codewithmukeshAutomate .NET build, test, and deployment pipelines with GitHub Actions or Azure DevOps.
wesleyosantos91Generate or review Dockerfiles for secure, efficient container images.
mosheshamGenerate optimized Dockerfiles, compose configurations, and multi-stage build plans.