Docker Best Practices

Trust Score 87/100

Practical containerization guidance: multi-stage builds, non-root runtime, layer caching, dockerignore hygiene, healthchecks, and secure secret handling.

triggers:dockerfile reviewmulti-stage buildnon-root runtimedockerignorelayer cachinghealthchecksecret handling

GitHub SKILL.md

What it does

This skill provides concrete, opinionated guidance for building minimal, reproducible Docker images that are secure and fast to start. It covers multi-stage builds to keep runtime images small, dependency caching patterns to speed CI, non-root runtime user configuration, healthchecks for production readiness, and safe handling of secrets during build and runtime. The guidance is actionable — examples show BAD vs GOOD Dockerfile patterns and a checklist to validate images before deployment.

When to use it

Activate this skill when writing or reviewing Dockerfiles, refactoring image build pipelines, hardening containers for production, improving CI build cache performance, adding container healthchecks, or auditing secret handling in image builds. It's aimed at developers and SREs who ship containerized services.

What's included

Scripts: none detected in the repo (has_scripts=false)
References: none bundled (has_references=false)
Instructions: step-by-step best practices for layer ordering, copy strategies, multi-stage builds, creating non-root users, .dockerignore hygiene, and a pre-deploy checklist. Examples include BAD/GOOD Dockerfile snippets and rules for when to use scratch, distroless images, and ephemeral build secrets.

Compatible agents

Best used by code-assistant agents that can edit or review Dockerfiles (Copilot-like agents, Codex-based assistants, or CLI automation bots). The content is language-agnostic and fits into CI/CD review flows.

Audit Summary

A clean, reference-only skill providing Docker best practices for multi-stage builds, non-root execution, layer caching, and secret handling. No bundled scripts — purely informational. Well-structured with BAD/GOOD examples and a practical checklist. Broad usefulness for any developer working with containers.

Watch Out

No scripts to execute or validate — skill is purely reference content

Notes

Pure documentation skill with no executable content. Clean SKILL.md with proper frontmatter. Good use of tables and examples. Would benefit from a references/ section linking to official Docker docs.

Information

Repository: codex-spellbook
Stars: 14

Trust Score

Overall87

Security95

Code Quality82

Architecture75

Usefulness72

Related Skills

Development Worktree

Create an isolated git worktree for feature work, auto-run project setup, and verify a clean test baseline before development.

TradeOS

Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r

Spring Boot Migration

Guided, phased migration for existing Spring Boot apps to Boot 4 / Java 25 (including Modulith 2 and Testcontainers 2), with scanners and reference guides.

Java 25 & Spring Boot 4 Code Reviewer

Run focused, evidence-based code reviews for Java 25 and Spring Boot 4 projects — migration risks, architecture boundaries, null-safety (JSpecify), security, an

ArcKit — French Public Procurement (fr-marche-public)

Generates French public procurement (Dossier de Consultation des Entreprises) drafts aligned with the Code de la Commande Publique, UGAP frameworks, and DINUM d

ArcKit Architecture Conformance

Run a systematic architecture conformance assessment that compares ADRs and principles against HLD/DLD artifacts to surface drift, violations, and technical deb

Vibe Security Auditor

Audits AI-generated codebases for critical security flaws like exposed keys, broken RLS, and insecure payment flows.

Neo4j Graph Database

Run Cypher queries and manage nodes/relationships against a local Neo4j instance exposed in the Docker network.

Back to Skills