All Classes and Interfaces
Class
Description
Adds cleanup commands to apt-get RUN instructions to reduce image size.
Adds standard OCI (Open Container Initiative) image labels to a Dockerfile.
Adds a USER instruction to a Dockerfile to run as a non-root user.
Combines consecutive RUN instructions into a single RUN instruction.
Represents a comment in a Dockerfile.
ADD instruction - adds files from source to destination (can extract archives and fetch URLs)
ARG instruction - defines a build argument
An argument which can be plain text, quoted string, or environment variable
Content within an argument (text, quoted string, or variable reference)
CMD instruction - provides defaults for executing container
Base for command forms (used by RUN, CMD, ENTRYPOINT)
COPY instruction - copies files from source to destination
Base for COPY/ADD forms (shell form, exec form, or heredoc)
Shell form for COPY/ADD instructions: sources followed by destination.
ENTRYPOINT instruction - configures container to run as executable
ENV instruction - sets environment variables
Environment variable reference like $VAR or ${VAR}
Exec form: CMD ["executable", "param1", "param2"]
Also used for COPY/ADD JSON array form.
EXPOSE instruction - documents ports that the container listens on
Root node representing a complete Dockerfile or Containerfile
A flag like --platform=linux/amd64
FROM instruction - sets the base image
HEALTHCHECK instruction - tells Docker how to test container health
Represents a single heredoc body within a heredoc command.
Unified heredoc form supporting both single and multiple heredocs.
Base interface for all Dockerfile instructions
LABEL instruction - adds metadata to an image
A literal text value, either plain (unquoted) or quoted (single/double quotes).
MAINTAINER instruction - sets the author field (deprecated but still supported)
ONBUILD instruction - prefixes another instruction to be executed later
A port specification in an EXPOSE instruction.
RUN instruction - executes commands
SHELL instruction - sets the default shell
Shell form: CMD command param1 param2
A build stage in a multi-stage Dockerfile.
STOPSIGNAL instruction - sets the signal to stop the container
USER instruction - sets the user and optionally group
VOLUME instruction - creates a mount point
WORKDIR instruction - sets the working directory
A trait representing a Docker base image from a FROM instruction.
Matcher for DockerImage traits with builder-style configuration.
Reasons why an image may be considered unpinned.
This class provides an empty implementation of
DockerParserListener,
which can be extended to create a listener which only needs to handle a subset
of the available methods.This class provides an empty implementation of
DockerParserVisitor,
which can be extended to create a visitor which only needs to handle a subset
of the available methods.This interface defines a complete listener for a parse tree produced by
DockerParser.This interface defines a complete generic visitor for a parse tree produced
by
DockerParser.Represents a known end-of-life Docker base image.
Finds Docker base images that have reached end-of-life.
Finds Dockerfiles where the final stage is missing a HEALTHCHECK instruction.
Finds containers that run as root, either explicitly via USER root/0
or implicitly by not having a USER instruction in the final stage.
Finds FROM instructions that use unpinned base images (either no tag or the 'latest' tag).
Normalizes Docker Hub image names to their canonical short form.
Replaces ADD instructions with COPY instructions where appropriate.
Whitespace and comments in Dockerfile.
Converts shell form ENTRYPOINT and CMD instructions to exec form (JSON array).