immanuwell/dockerfile-roast

Health v2 · maintenance only

Flags: young

Adoption not part of the score

1082 stars · 21 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

droast is a Dockerfile linter written in Rust with 85 opinionated rules that report bad practices using snarky, humorous messages. It runs as a CLI binary, a WebAssembly-powered browser tool, a GitHub Action, and editor extensions for VS Code and Neovim.

Use cases

• lint dockerfiles for security issues and bad practices
• catch hardcoded secrets and passwords in dockerfiles
• check dockerfiles in CI on every pull request
• get inline dockerfile diagnostics while editing in vscode or neovim
• find outdated base images and layer bloat in dockerfiles
• validate dockerfile syntax including heredocs and BuildKit flags
• replace hadolint with a friendlier rule-mapped linter

When to choose

• you want opinionated, plain-English dockerfile linting with personality
• you need a fast single-binary linter with GitHub Action CI integration
• you want a private, client-side browser linter with no server upload
• you use hadolint rule IDs and want a compatible alternative

When to avoid

• you need fully configurable, neutral-toned lint rules without opinions
• you require deep container image scanning beyond Dockerfile static analysis
• you depend on a linter with a large plugin ecosystem

Facets

cli-tool · maturity active

linter static-site-generator security developer-tools cli developer-tools security cli wasm browser cross-platform windows dockerfile-linter static-analysis hadolint-alternative github-action vscode-extension neovim-plugin snarky devops containers command-line docker linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="immanuwell/dockerfile-roast")