← All Tools

Container Manifest Linter

Running as root? That’s raw noodles, not ramen. Paste a Dockerfile or a Kubernetes manifest and get the security findings only — graded, explained, each with a fix you can paste back.

🔒 100% client-side. Nothing you paste is sent or stored anywhere — there is no endpoint behind this page. Security-relevant checks only: for style and best-practice linting use hadolint or kube-score alongside.
Load example:
⚠ Advisory only. 24 checks (rules 2026-09-19.1) against the pasted text — not a runtime scan, not a policy engine. A clean result means the manifest does not say anything unsafe, not that the image or the cluster is safe. Tools are provided for educational and authorized use only.