Container build checker

Dockerfile Linter

A Dockerfile linter checks Docker build instructions for common security, reproducibility, cache, health check, and image-size issues. Use this free browser-based checker before opening a pull request or waiting for CI to fail.

Paste your Dockerfile

Runs entirely in your browser. No Dockerfile content is uploaded.

What this Dockerfile checker catches

The checker focuses on the Dockerfile issues teams commonly catch during review: mutable image tags, root runtime users, missing health checks, package manager cache bloat, broad COPY instructions, and accidental secrets in image layers.

It is intentionally fast and local. Pair it with hadolint, image vulnerability scanning, and CI policy checks when you need strict enforcement across production images.

Frequently asked questions

What is a Dockerfile linter?

A Dockerfile linter checks Docker build instructions for security, reproducibility, image size, and maintainability issues before the image reaches CI.

Does this replace hadolint?

No. This tool is a fast browser-based precheck for common Dockerfile mistakes. Use hadolint or another CI linter for full policy enforcement.

Why should Docker images avoid root users?

Running containers as a non-root user limits the impact of application bugs and makes privilege escalation harder after a compromise.

Why is latest a risky image tag?

The latest tag can point to different image contents over time, which makes builds less reproducible and harder to debug.

Is my Dockerfile uploaded?

No. The Dockerfile linter runs in your browser, so pasted content stays on your device.

Related tools

Ship the project behind your next container

NitroBuilds helps developers show shipped projects, technical decisions, screenshots, production links, and release evidence in one public portfolio.

Add a project