Container Build File Checker
Local container reviewReview Dockerfiles, Compose services, build stages, ignored files, security risks, and reproducible checks.
Analysis runs in this tab. It does not build images, contact registries, execute shell commands, or prove runtime safety.
Ready to inspect a container build
Paste or select Dockerfile, Compose and .dockerignore inputs to map stages, services and risks.
How to use it
- 01
Load the build inputs
Paste or select a Dockerfile, Compose YAML, .dockerignore and visible project files without uploading them.
- 02
Inspect stages and services
Follow multi-stage COPY edges, service dependencies, images, networks, volumes, ports, users and health checks.
- 03
Review and reproduce
Investigate explainable quality and security findings, export a redacted report, and copy Docker, Hadolint or Trivy commands.
Frequently asked questions
Does this tool build or run a container image?
No. It performs bounded static review in the browser. Use Docker or another compatible builder to resolve image metadata, execute instructions and test the runtime result.
Are these the same results as docker build --check or Hadolint?
The editor aligns with important official and community checks but does not claim exact rule parity. It provides commands for the real tools when exact validation is required.
How is .dockerignore evaluated?
Common glob, directory and negation rules are applied to filenames from the selected project. Unselected files and advanced builder-specific edge cases cannot be inferred.
Are environment values uploaded?
No. Inputs and reports stay in the tab. Reports remove evidence for secret-looking diagnostics, but you should still review them before sharing.
Related tools
Keep working with other focused browser utilities.