immanuwell / dockerfile-roast

What is dockerfile-roast?

dockerfile-roast, or droast, is a Rust-built Dockerfile linter that scans for 63 common bad practices across base images, security, package managers, and layer optimization. It delivers findings with blunt, snarky roasts—like calling out "FROM ubuntu:latest" as unpinned restaurant roulette—instead of dry warnings, helping devs spot issues that bloat images or invite prod incidents. Run it via CLI on single files or globs, or docker run for zero-install checks, with outputs tuned for terminal, JSON, compact, or GitHub Actions annotations.

Why is it gaining traction?

Unlike bland dockerfile linter tools, its personality hooks you: roasts make reviews fun and memorable, while flags like --no-roast, --min-severity warning, and --skip DF001 let you tune it. CI perks shine—GitHub Actions integration posts annotations directly, pre-commit hooks enforce rules, and --no-fail keeps builds advisory. Prebuilt binaries, shell completions, and a GHCR image make it dead simple versus compiling hadolint or dockerfile-lint.

Who should use this?

DevOps engineers and SREs linting Dockerfiles in monorepos before pushes. Backend teams building Python or Node images via GitHub Actions or GitLab runners. Anyone tired of manual audits on multi-stage builds, apt cache leaks, or root runs—pairs well with dockerfile linter VSCode extensions or online checks.

Verdict

Grab it for the best dockerfile linter personality and CI polish; 51 stars and 1.0% credibility score scream early days, but solid docs, cross-platform releases, and MIT license make it low-risk to clone into your dockerfile github repository workflow. Test on your messiest file—fix the roasts, ship smaller images.

(187 words)