How it works
About the Dockerfile Linter
Writing a Dockerfile seems simple, but small mistakes can lead to massive image sizes, broken build caches, and critical security vulnerabilities. The Dockerfile Linter is designed to instantly analyze your container configurations against industry best practices. It acts as an offline, client-side static analysis engine that highlights common pitfalls—like copying all source code before installing dependencies, running containers as root, or using the unpredictable "latest" tag for base images.
Unlike traditional CI/CD pipeline linters (like Hadolint) that require installation via Homebrew or NPM, this tool runs entirely in your web browser. This means zero setup time and zero privacy risks. Because the parsing engine operates locally via JavaScript, your proprietary Dockerfiles and hardcoded configurations are never uploaded to any external server. You get immediate, colorful feedback with actionable explanations on how to fix each issue, allowing you to iterate and secure your containers in seconds.