Dockerfile Analyzer
Analyze Dockerfiles for base images, build stages, instructions, ports, users, environment variables, caching opportunities, and common containerization issues.
Analyze Dockerfile
Inspect Dockerfile instructions, base images, build stages, ports, users, and common containerization issues.
Dockerfile Summary
Overview of the Dockerfile structure and detected issues.
Base Images
Images used by the Docker build stages.
node:20Findings
Potential issues and useful observations detected in the Dockerfile.
No USER instruction
The container may run as root by default. Consider using a dedicated non-root user where possible.
Shell-form RUN instructions
1 RUN instruction(s) use shell form. This is normal in many Dockerfiles, but exec form can provide more predictable process behavior for commands that need direct signal handling.
Review dependency layer caching
Consider copying dependency manifests before application source files so dependency installation can be cached between builds.
Instruction Inventory
Every recognized Dockerfile instruction and its location.
node:20/apppackage*.json ./npm ci. .3000["npm", "start"]Exposed Ports
Runtime Configuration
Analyzer Notes
This analyzer performs static Dockerfile analysis. It does not build the image or execute any Docker commands.
Warnings are recommendations rather than proof that a Dockerfile is insecure or incorrect. Some patterns are intentional depending on the application and deployment environment.
Never place passwords, API keys, tokens, or other sensitive credentials directly into Dockerfile ENV or ARG instructions.