Nobuf

Container Build File Checker

Local container review

Review Dockerfiles, Compose services, build stages, ignored files, security risks, and reproducible checks.

Paste a Dockerfile or Containerfile…

Analysis runs in this tab. It does not build images, contact registries, execute shell commands, or prove runtime safety.

Ready to inspect a container build

Paste or select Dockerfile, Compose and .dockerignore inputs to map stages, services and risks.

How to use it

  1. 01

    Load the build inputs

    Paste or select a Dockerfile, Compose YAML, .dockerignore and visible project files without uploading them.

  2. 02

    Inspect stages and services

    Follow multi-stage COPY edges, service dependencies, images, networks, volumes, ports, users and health checks.

  3. 03

    Review and reproduce

    Investigate explainable quality and security findings, export a redacted report, and copy Docker, Hadolint or Trivy commands.

Frequently asked questions

Does this tool build or run a container image?

No. It performs bounded static review in the browser. Use Docker or another compatible builder to resolve image metadata, execute instructions and test the runtime result.

Are these the same results as docker build --check or Hadolint?

The editor aligns with important official and community checks but does not claim exact rule parity. It provides commands for the real tools when exact validation is required.

How is .dockerignore evaluated?

Common glob, directory and negation rules are applied to filenames from the selected project. Unselected files and advanced builder-specific edge cases cannot be inferred.

Are environment values uploaded?

No. Inputs and reports stay in the tab. Reports remove evidence for secret-looking diagnostics, but you should still review them before sharing.

Keep working with other focused browser utilities.

All tools

Local by default; remote data sources are clearly disclosed.

© 2026 Nobuf

Nobuf

Fast, local-first utilities powered by your browser.