forge-dockerfile

What problem does it solve?

It prevents AI-generated Dockerfiles from being insecure, non-deterministic, and inefficient by enforcing production-grade Dockerfile conventions that avoid common CI and runtime failures.

Core Features & Use Cases

• Production-grade Dockerfile structure: Multi-stage builds that keep runtime-only artifacts in the final image.
• Reproducible and secure dependency handling: Pinned base images, cache-friendly COPY ordering, and secret mounts instead of baking secrets into layers.
• Operational correctness: Non-root execution, exec-form CMD for proper signal handling, and required .dockerignore hygiene to keep builds fast and consistent.
• Works across common stacks: Node, Go, Rust, and Python defaults, with worked Dockerfile examples and a dedicated verifier script.

Quick Start

Use the Dockerfile verifier to check your Dockerfile at skills/infra/forge-dockerfile/verify/check_dockerfile.sh and fix any violations it reports.