openauditB85out of 100: openaudit's audit of itself
container.dockerfile

Dockerfile security & best practices

Checks Dockerfiles for mutable base images, root users, secrets in ENV/ARG, remote ADD, curl-pipe-sh, package-cache hygiene, missing HEALTHCHECK and unsafe COPY of the build context.

Engine
Built-in
Targets
Container
Areas
Security, Supply chain, Best practices, Performance
Runs
By default, when the target applies
Network
Only the target itself

Run only this auditor

bunx openaudit image:nginx:1.27 --only container.dockerfile

Built into openaudit; nothing to install.