akin-ozer avatar

Dockerfile Validator

This validator runs hadolint and Checkov against your Dockerfiles and classifies findings into Critical, High, Medium, and Low buckets. It skips reference docs if everything passes, which is a nice touch. The skill follows a strict execution order and includes fallback branches for when you're in a locked-down environment without Python or Docker. You get severity-based reporting that maps issues to specific reference files (security checklist, optimization guide, best practices). The deterministic flow and explicit fallback handling make it reliable in CI pipelines where tool availability varies. If you're reviewing Dockerfiles before merge or hardening images for production, this gives you structured output without the usual tool-chaining guesswork.

skills.sh installs
786
GitHub stars
337
last updated
Aug 21, 2026

Install

$ npx -y skills add akin-ozer/cc-devops-skills --skill dockerfile-validator --agent claude-code

Installs into .claude/skills of the current project.

Files

Dockerfile Validator

Validate Dockerfiles with deterministic stages, clear severity reporting, and explicit fallbacks when tools or network access are constrained.

Trigger Phrases

Use this skill when the user asks for tasks like:

  • "validate this Dockerfile"
  • "lint/check my Dockerfile"
  • "security scan Dockerfile"
  • "optimize Docker image size/build time"
  • "review Dockerfile before merge"
  • "find issues in Dockerfile.prod/Dockerfile.dev"

Use / Do Not Use

Use this skill for:

  • Syntax and lint validation
  • Security and secrets checks
  • Best-practice and performance review
  • Dockerfile hardening before CI/CD or production

Do not use this skill for:

  • Generating a new Dockerfile from scratch (use dockerfile-generator)
  • Running containers, debugging runtime behavior, or image registry operations

Local Files In This Skill

  • Validator script: scripts/dockerfile-validate.sh
  • References:
    • references/security_checklist.md
    • references/optimization_guide.md
    • references/docker_best_practices.md
  • Example Dockerfiles: examples/*.Dockerfile

Deterministic Execution Flow (Required)

Sponsors

Details

Repository
github.com/akin-ozer/cc-devops-skills
Categories
Security, DevOps & CI/CD, Code Review & Quality
First seen
Jun 3, 2026

More from akin-ozer/cc-devops-skills

All 31

Recommended

More Security
1davila7 avatardevops-iac-engineerdavila7/claude-code-templatesImplements infrastructure as code using Terraform, Kubernetes, and cloud platforms. Designs scalable architectures, CI/CD pipelines, and observability solutions783skills.sh installs
2mindrally avatarsoliditymindrally/skillsExpert in Solidity smart contract development with security and gas optimization745skills.sh installs
3brightdata avataragent-onboardingbrightdata/skillsOnboard an agent to Bright Data. Use when a coding agent first encounters Bright Data — for live web work (search, scrape, structured data), for wiring Bright D744skills.sh installs
4ruvnet avatarsafety-scanruvnet/rufloScan inputs for prompt injection, unsafe content, and adversarial attacks using AIDefence. Use when processing untrusted input (user submissions, API payloads, 744skills.sh installs
5madteacher avatarflutter-networkingmadteacher/mad-agents-skillsImplement, fix, debug, review, or refactor Flutter networking code for HTTP/REST APIs, WebSocket realtime flows, authentication and token refresh, request heade727skills.sh installs
6mindrally avatarsupabase-developmentmindrally/skillsSupabase development guidelines for database, authentication, real-time subscriptions, and Edge Functions.724skills.sh installs