Dockadvisor
A fast, lightweight Dockerfile linter written in Go that detects issues, enforces best practices, and provides quality scores.
What is Dockadvisor?
Dockadvisor is a fast, lightweight Dockerfile linter written in Go that helps developers write better container images. It detects common issues, anti-patterns, and security vulnerabilities in Dockerfiles by validating them against 60+ best practice rules. The tool provides instant feedback with quality scores and actionable recommendations to improve Dockerfile quality.
Developers, DevOps engineers, and platform teams who build and maintain Docker images and want to ensure their Dockerfiles follow best practices and security guidelines.
Developers choose Dockadvisor for its speed, comprehensive rule coverage, and clear feedback. Its lightweight Go implementation, WebAssembly support for browser usage, and quality scoring system provide a practical alternative to heavier linters while covering all standard Dockerfile instructions and security checks.
Overview
Lightweight Dockerfile linter that helps you write better Dockerfiles. Get instant feedback with quality scores, security checks, and 60+ best practice rules.
Use Cases
Best For
- Enforcing Dockerfile best practices in CI/CD pipelines
- Detecting security vulnerabilities and secrets in Docker builds
- Improving multi-stage Dockerfile structure and efficiency
- Getting instant feedback on Dockerfile syntax and style issues
- Tracking Dockerfile quality improvements over time with scoring
- Validating Dockerfiles directly in the browser via WebAssembly
Not Ideal For
- Projects requiring real-time, in-editor linting without browser execution
- Teams already integrated with Hadolint or dockerfilelint for Dockerfile validation
- Environments using experimental or vendor-specific Dockerfile extensions beyond standard instructions
Pros & Cons
Pros
Built with Go for optimal speed and efficiency, making it ideal for CI/CD pipelines, as highlighted in the features section.
Validates 60+ rules across all standard Dockerfile instructions, multi-stage builds, and security checks like secrets detection and ARG scoping.
Provides clear error messages with line numbers, severity levels, and a 0-100 quality score to help track and improve Dockerfile quality over time.
Available as CLI, Go library, and WebAssembly module, allowing usage from command line to browser-based tools.
Cons
The README doesn't mention support for custom rules or plugins, which may restrict adaptability to specific project needs.
Uses fixed penalties (-15 for errors, -5 for warnings) that may not accurately reflect issue severity or allow for nuanced quality assessment.
Requires Docker Compose to run the web interface, which adds complexity and isn't as feature-rich as dedicated GUI linters.
Open Source Alternative To
Dockadvisor is an open-source alternative to the following products:
Hadolint is a Dockerfile linter that validates Dockerfiles against best practices and common errors, helping to write better Docker images.
dockerfilelint is a linter for Dockerfiles that checks for best practices, syntax errors, and potential issues to ensure Dockerfile quality and security.
Frequently Asked Questions
Related Projects
hadolintDockerfile linter, validate inline bash, written in Haskell
FROM:latestAn opinionated Dockerfile linter.
Monitor and limit your docker image size:whale: Keep an eye on your docker image size and prevent it from growing too big
Dockerfile Linter actionDockerfile Linter is a tool that analyzes Dockerfiles to ensure they follow established best practices for creating efficient and secure Docker images. It helps developers catch common mistakes and optimize their Docker builds by validating syntax and providing actionable feedback. ## Key Features - **Rule-Based Validation** — Implements over 40 specific rules covering directives, instructions, and common anti-patterns. - **ShellCheck Integration** — Uses ShellCheck to analyze shell code within RUN instructions for additional safety. - **Flexible Ignore System** — Supports ignoring rules via inline comments, YAML configuration files, or CLI flags. - **CI/CD Ready** — Designed for integration into continuous integration and delivery pipelines with configurable error levels. - **Multiple Interfaces** — Can be used via CLI, Docker container, or natively within the Buddy CI/CD platform. ## Philosophy The linter emphasizes practical, actionable feedback to help developers build better Docker images by following documented best practices and avoiding common pitfalls.
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.