docker-check
Docker 설정 점검. 멀티스테이지 빌드, 헬스체크, 보안, 이미지 최적화 검토
When & Why to Use This Skill
The docker-check skill is a comprehensive auditing tool designed to optimize containerization workflows. It automatically scans Dockerfiles and docker-compose configurations to ensure adherence to industry best practices, focusing on multi-stage builds, security hardening, and image size optimization. By providing actionable reports on layer caching, health checks, and non-root user execution, it helps developers and DevOps engineers build more secure, efficient, and production-ready container images.
Use Cases
- Security Hardening: Automatically identify security risks such as containers running with root privileges or sensitive secrets exposed during the build process.
- CI/CD Optimization: Analyze Dockerfiles to implement multi-stage builds and optimize layer caching, significantly reducing build times and final image sizes for faster deployments.
- Reliability Engineering: Audit configurations to ensure mandatory HEALTHCHECK instructions and proper .dockerignore usage are implemented for better container orchestration and stability.
- Legacy Code Modernization: Scan older container setups to identify opportunities for migrating to slim/alpine base images and removing unnecessary packages.
| name | docker-check |
|---|---|
| description | Docker 설정 점검. 멀티스테이지 빌드, 헬스체크, 보안, 이미지 최적화 검토 |
| allowed-tools | Read, Grep, Glob, Bash |
Docker Configuration Check
Instructions
- 모든 Dockerfile 및 docker-compose 파일 스캔
- 다음 항목 점검:
- 멀티스테이지 빌드 사용
- 헬스체크 설정
- 비root 사용자 설정
- 이미지 크기 최적화
- 레이어 캐싱 효율
- 보안 설정 검토
- 개선 보고서 생성
Check Items
- 멀티스테이지 빌드 적용
- HEALTHCHECK 명령어 존재
- 비root 사용자 실행
- .dockerignore 파일 존재
- 불필요한 패키지 제거
- 시크릿 빌드타임 노출 없음
- 적절한 베이스 이미지 (slim/alpine)
Output Format
## Docker Health Report
### Files Analyzed
- Dockerfile
- docker-compose.yaml
### Issues Found
| File | Issue | Severity |
|------|-------|----------|
| ... | ... | ... |
### Optimization Opportunities
- [최적화 기회]
### Security Recommendations
- [보안 권장사항]