← all checklists

Docker / containers

17 items · source

Copy as markdown

Filter items

Secrets Management & Cryptography

• Verify secrets are never stored in Docker images.

Runtime, Containers & Hosting

• Verify .dockerignore.
• Scan Dockerfile.

CI/CD & Supply Chain

• Protect Dockerfiles.
• Verify Docker socket exposure.

Pre-Release Gates

• Docker registry credentials
• Docker audit complete.

AI Output Handling

• Prevent access to Docker socket.

AI Integrations (email, browser, repos, cloud)

• Generated Dockerfiles receive security review.

AI-Generated Crypto, Dependency & Config Bugs

Review every AI-generated:

• Dockerfile
• docker-compose

AI-Generated Infrastructure & Pipeline Bugs

• Verify generated Dockerfile does not copy .env.
• Verify generated Dockerfile does not copy SSH keys.
• Verify generated Dockerfile does not copy GitHub credentials.
• Verify generated Dockerfile does not embed secrets in ARG.
• Verify generated Dockerfile does not use untrusted remote scripts.

Agent Prompts & PR Review

• Identify Docker changes.