LOADING N0PERM…
Smarter Dockerfile linter that helps you build best-practice Docker images by parsing Dockerfiles into an AST and checking rules against ShellCheck.
A standard CONTAINER_SECURITY utility used across offensive reconnaissance, packet forensics, and defensive system administration.
Direct visibility into network interfaces, protocol frames, access controls, or filesystem structures without graphical overhead.
During live system triage, initial reconnaissance, forensic capture inspection, or baseline configuration auditing.
# macOS
brew install hadolint
# Docker
docker run --rm -i hadolint/hadolint < DockerfileDockerfile rule verification:
- Lint local Dockerfile: hadolint Dockerfile
- Ignore non-critical warning rules: hadolint --ignore DL3008 --ignore DL3013 Dockerfile
- Format output as SARIF for CI/CD pipelines: hadolint -f sarif Dockerfile