Dockerfile & Container Build Sanity Gate — Catch Root Users, Bloat, Leaked Secrets & Fragile Layers Before You Build
An adversarial reviewer for Dockerfiles and container builds. It flags root users, image bloat, unpinned or cache-busting layers, leaked secrets, and missing hardening, then returns a PASS / FIX / BLOCK verdict — before you build or push the image.