Docker Reviewer

What it does

The docker-reviewer skill analyzes Dockerfiles to identify potential security vulnerabilities, inefficiencies, and best practice violations. It provides feedback on areas like image size optimization, base image selection, and the use of sensitive information in the Dockerfile. This helps ensure container images are secure, efficient, and maintainable.

When to use it

• Before deploying a new application: Review your Dockerfiles proactively to catch issues early in the development lifecycle.
• During code reviews: Integrate docker-reviewer into your team's workflow for consistent Dockerfile quality.
• When optimizing existing container images: Identify areas where you can reduce image size and improve performance.
• To ensure compliance with security standards: Verify that your Dockerfiles adhere to organizational or industry best practices.

Key capabilities

• Dockerfile analysis
• Security vulnerability detection
• Image size optimization suggestions
• Best practice violation identification

Example prompts

• "Review this Dockerfile for potential vulnerabilities: [Dockerfile content]"
• "Can you analyze this Dockerfile and suggest ways to reduce the image size? [Dockerfile content]"
• "Check this Dockerfile against common security best practices. [Dockerfile content]"

Tips & gotchas

The skill requires a valid Dockerfile as input; it cannot function without one. The quality of feedback depends on the complexity and structure of the provided Dockerfile.