super-review:dockerfile

What problem does it solve?

This Skill reduces insecure, non-reproducible, and bloated container images by flagging Dockerfile anti-patterns that commonly slip past basic linting and lead to real runtime and supply-chain risk.

Core Features & Use Cases

• Rootless execution enforcement: Detects missing or ineffective USER directives (including numeric UID/GID requirements).
• Multi-stage hygiene & image bloat prevention: Identifies single-stage build leakage of compilers and build tools into production images.
• Build cache and reproducibility improvements: Finds COPY . . ordering issues, missing .dockerignore exclusions, non-pinned base images, and multi-arch build performance gaps.
• Secrets safety during builds: Detects credential-shaped ARG usage and recommends BuildKit --mount=type=secret.
• Runtime operability and clarity: Flags missing HEALTHCHECK and mismatched EXPOSE declarations.

Quick Start

Ask the orchestrator to review your PR: "Run super-review:run on this diff that changes Dockerfile, .dockerignore, or docker-compose.yml and produce a bounded, evidence-quoted container build report."