Dockerfile Audit Kit — Report-Only Lint, Scores & Batch Reports

Sold by TradeSheets with secure USDC checkout.

Description

Report-only Dockerfile audit for developers and agents: run 80 upstream lint rules (security, performance, correctness, maintainability) over local Dockerfiles, with a 0-100 score and A-F grade per file, and batch issues.csv, scores.csv, summary.json, and exceptions.csv reports for many files in one run — without modifying any input. The batch wrapper never applies fixes and never calls the upstream fixer; inputs are hash-verified unchanged. Standard library only, no network, no account. Includes the upstream dockerfile-doctor tool unchanged with attribution, a batch wrapper, fictional samples, and tests. Findings are heuristics on file text, not proof an image builds or is secure; the upstream fixer's own corpus review found most generated patches non-equivalent, so no fix is applied or promised — review each finding and verify any edit by building the image.