The Dockerfile & Container Build Sanity Gate is an adversarial reviewer for Dockerfiles and container build files. You paste a Dockerfile and it reads it the way a security-minded platform engineer would in code review — then returns a structured verdict. It does not rewrite your Dockerfile or generate one.
It runs five passes — privilege and user, image size and bloat, layer order and pinning, secret and data leakage, and hardening best practices — and returns a structured PASS / FIX / BLOCK verdict with the highest-impact fixes first. It is built to be the last read before an image is built or pushed, when the author is too close to the file to spot a root process, a baked-in token, or a cache-busting layer.