dockerfile-audit-mcp
by Tyler FrancisUpdated Aug 12, 2026
Audits Dockerfiles for missing USER instructions, credentials baked into ENV/ARG, curl-pipe-shell patterns, unpinned :latest base images, and remote-URL ADD instructions. Handles multi-stage builds correctly (only the final shipped stage's USER matters).
Audits Dockerfiles for missing USER instructions, credentials baked into ENV/ARG, curl-pipe-shell patterns, unpinned :latest base images, and remote-URL ADD instructions. Handles multi-stage builds correctly (only the final shipped stage's USER matters).