Open-source alternatives to Dockadvisor

A repository containing useful, lightweight and reliable dockerfiles.

Hadolint is a static analysis tool designed to validate container build configurations. It functions as a security scanner and configuration auditor, parsing build instructions into a structured format to identify deviations from security and efficiency standards. The tool distinguishes itself by performing deep inspection of embedded shell commands. By tokenizing and analyzing these scripts, it detects common scripting errors and security vulnerabilities that might otherwise persist within a container image. It integrates external analysis tools to provide specialized validation for these in

dfg - Generates dockerfiles based on various input channels.

:whale: Keep an eye on your docker image size and prevent it from growing too big