Repolode
Submit
deckrun

deckrun/dockadvisor

A fast Go-based Dockerfile linter that flags common issues, anti-patterns and security risks with 60+ rules and a 0-100 quality score.

Open-source alternative to:Hadolint

View on GitHubWebsite
Stars
225
Forks
7
Open issues
0
Last commit
9 months ago

What is it?

Dockadvisor is a Dockerfile linter written in Go. It parses a Dockerfile and reports violations with line numbers, severity levels and links to Docker documentation, helping developers catch syntax errors, build failures and best-practice problems before they reach CI.

The linter covers every standard Dockerfile instruction, including multi-stage builds, and includes checks for secrets passed through ARG or ENV, ARG scoping and undefined variable references. Each result also gets a quality score that drops with each error or warning, which makes it easy to track Dockerfile quality over time.

Beyond the CLI, it can be used as a Go library through the parse package, compiled to WebAssembly for browser use, or run as a web interface with Docker Compose.

Key features

  • 01Checks all standard Dockerfile instructions and multi-stage builds against 60+ rules.
  • 02Reports issues with line numbers, severity levels and documentation links.
  • 03Produces a 0-100 quality score based on errors and warnings.
  • 04Detects potential secrets in ARG and ENV variables.
  • 05Can run as a Go library, a CLI, a WebAssembly module or a web interface.

Use cases

  • Linting Dockerfiles in CI pipelines before images are built.
  • Reviewing Dockerfile quality in pull requests with a consistent score.
  • Embedding Dockerfile validation into a Go tool or web service.
  • Teaching or learning Dockerfile best practices with instant feedback.

Topics

#dockerfile#linter#docker#containers#go#static-analysis#security#devops

FAQ

What is dockadvisor?
A fast Go-based Dockerfile linter that flags common issues, anti-patterns and security risks with 60+ rules and a 0-100 quality score. Dockadvisor is a Dockerfile linter written in Go. It parses a Dockerfile and reports violations with line numbers, severity levels and links to Docker documentation, helping developers catch syntax errors, build failures and best-practice problems before they reach CI.
Is dockadvisor free to use? What license does it have?
dockadvisor is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
Is dockadvisor still maintained?
No commits for 6+ months. The last commit to dockadvisor was on Jan 12, 2026.
What can I use dockadvisor for?
Linting Dockerfiles in CI pipelines before images are built. Reviewing Dockerfile quality in pull requests with a consistent score. Embedding Dockerfile validation into a Go tool or web service. Teaching or learning Dockerfile best practices with instant feedback.
Where can I get dockadvisor?
The source code and installation instructions are on GitHub: https://github.com/deckrun/dockadvisor

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects