Example Analyses

Real-world Dockerfiles scanned and explained.

MySQL server

Real-world MySQL 5.7 Dockerfile from sameersbn/docker-mysql, a widely used community MySQL image.

Source: GitHub

OWASP DockSec

Dockerfile from OWASP DockSec, an AI-assisted Dockerfile security tool — a real-world example, rewritten upstream on 2026-09-20. It now pins its tool versions and fails loudly on a bad download, but still fetches a binary and an archive with no checksum or signature check, runs as root, and executes a copied-in entrypoint script.

Source: GitHub

Python / uvicorn

Official Python getting-started example from the Docker documentation.

Source: Docker

Node.js / Alpine

Official Node.js getting-started example from the Docker documentation.

Source: Docker

OWASP Dependency Check

OWASP Dependency Check Dockerfile (current upstream) — a multi-stage build: jlink-trimmed JDK and Go toolchain layered onto a .NET runtime base, running non-root.

Source: GitHub