Nothing to hand? Load the — node:latest running as root, a live API key baked into ENV, curl | sh, a privileged service with the Docker socket mounted, bare depends_on and no healthcheck anywhere — or the , where the correct verdict is production-ready and the useful output is what to add next.
Paste the files — the prescan is free
No upload, no AI: the prescan reads every build stage, base image and compose service in your browser and lists what it mechanically found. The unit inventory, then the flags — unpinned :latest bases, a final stage with no USER, secrets baked into ENV/ARG or compose environment, apt-get without cache cleanup in the same layer, curl | sh installs, ADD where COPY would do, shell-form CMD, COPY . . with no .dockerignore, privileged services and docker.sock mounts, bare depends_on, and missing healthchecks or resource limits. Each group explains why it matters. This part costs nothing and happens while you type.
The AI reviews it — this is the metered part
A senior platform engineer's pass: a production-readiness posture with the single most important change named, the inventory with each unit's role, and prioritized findings across security, correctness, image size, build cache, reliability, compose orchestration and hygiene — each with the problem, the concrete impact (root in the container, the unkillable PID 1, the cache-busted twenty-minute build, the database race on deploy), the fix and a corrected Dockerfile or YAML fragment. Every prescan flag is confirmed or explicitly set aside. Findings may only cite stages and services that actually appear in your files. Pricing is honest: a worst-case amount is reserved before the run and only what the run actually uses is charged — the meter next to the button shows both.
Fix, export, re-run
Quick wins for the one-line changes, focus areas tied to specific findings for the real work, and the corrected fragments as one commented file you can open next to your Dockerfile — plus per-finding snippet copy, the findings table as CSV (snippet column included) and Markdown or JSON export. Signed in, every review is saved to your account and follows you between devices; run it again after your edits and the page shows what cleared, what is still open and what is new since last time, compared in your browser for free.
Derived from the @affaan-m/docker-patterns skill (MIT license).