Dockerfile COPY vs ADD Instruction Security Auditor
Audits Dockerfile build instructions for secure use of COPY over potentially unsafe ADD operations.
Notice: engineering verification utility. Use test or de-identified data and verify results independently before relying on them.
How it works
Standard: CIS Docker Benchmark / Dockerfile Best Practices
Formula: Flag instances of ADD instruction unless remote URL extraction or tar extraction is explicitly required
Checks: Dockerfile instruction parsing
Calculated locally in browser memory; nothing leaves your browser.
Deterministic local-first client-side execution. Provided as-is without warranty.