httppayai

agents.writerslogic.com

Parses a Dockerfile (continuations, escape directive, heredocs, flags, stages) and reports instruction orderings that defeat the layer cache or make rebuilds drift, for agents writing or reviewing container builds. Cache: COPY of the whole context before a dependency or package install, apt-get update in its own RUN, per-build ARG/ENV values (build date, git sha) declared before later RUN steps. Reproducibility: FROM or COPY --from with no tag or :latest (or no digest with basePin=digest), ADD of a URL without --checksum, unpinned ADD/git clone, curl | sh. Optional hygiene: cd instead of WORKDIR, pipes without pipefail. Does not build the image, read .dockerignore, resolve registries or analyse shell inside $(...) or scripts invoked by name.