Individual skill
dockerfile-optimise
Dockerfile optimization guidelines from official Docker documentation. This skill should be used when writing, reviewing, or refactoring Dockerfiles to ensure optimal build time, image size, security, and robustness. Triggers on tasks involving Dockerfile creation, Docker image builds, container optimization, multi-stage builds, build cache, or Docker security hardening.
skills/.experimental/dockerfile-optimise/SKILL.md
Source commit cf93c57cac89d6fc3e4194686000411567f5caf3
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 5, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 221
- Repository last updated
- Aug 15, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- writing Derived category
- devops Derived category
- security Derived category
- docs Derived category
- devops-containers Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 7,226 bytesSKILL.mdcore · 7,226 bytesassets/templates/_template.mddoc · 924 bytesmetadata.jsonasset · 1,095 bytesreferences/_sections.mddoc · 2,114 bytesreferences/base-arg-version.mddoc · 2,251 bytesreferences/base-distroless.mddoc · 4,244 bytesreferences/base-minimal-image.mddoc · 2,627 bytesreferences/base-official-images.mddoc · 2,355 bytesreferences/base-pin-versions.mddoc · 2,938 bytesreferences/base-rebuild-regularly.mddoc · 2,577 bytesreferences/cache-apt-combine.mddoc · 2,590 bytesreferences/cache-copy-deps-first.mddoc · 2,097 bytesreferences/cache-copy-link.mddoc · 2,961 bytesreferences/cache-external.mddoc · 2,618 bytesreferences/cache-invalidation.mddoc · 2,218 bytesreferences/cache-layer-order.mddoc · 1,881 bytesreferences/cache-minimize-layers.mddoc · 2,640 bytesreferences/cache-mount-package.mddoc · 2,776 bytesreferences/ctx-bind-mounts.mddoc · 2,642 bytesreferences/ctx-dockerignore.mddoc · 2,587 bytesreferences/ctx-minimize-context.mddoc · 3,020 bytesreferences/ctx-syntax-directive.mddoc · 3,402 bytesreferences/dep-cache-mount-apt.mddoc · 2,544 bytesreferences/dep-cache-mount-npm.mddoc · 3,010 bytesreferences/dep-cache-mount-pip.mddoc · 1,718 bytesreferences/dep-cleanup-caches.mddoc · 3,390 bytesreferences/dep-version-pin.mddoc · 2,589 bytesreferences/inst-copy-over-add.mddoc · 3,993 bytesreferences/inst-entrypoint-exec.mddoc · 4,107 bytesreferences/inst-healthcheck.mddoc · 4,085 bytesreferences/inst-heredoc-scripts.mddoc · 3,861 bytesreferences/inst-json-cmd.mddoc · 3,253 bytesreferences/inst-workdir-absolute.mddoc · 3,314 bytesreferences/lint-build-checks.mddoc · 2,867 bytesreferences/lint-labels.mddoc · 4,201 bytesreferences/lint-pipefail.mddoc · 3,439 bytesreferences/lint-single-concern.mddoc · 4,053 bytesreferences/lint-sort-arguments.mddoc · 2,968 bytesreferences/sec-attestations.mddoc · 3,523 bytesreferences/sec-ephemeral-containers.mddoc · 3,746 bytesreferences/sec-no-secrets-in-args.mddoc · 4,136 bytesreferences/sec-no-unnecessary-packages.mddoc · 3,796 bytesreferences/sec-non-root-user.mddoc · 3,168 bytesreferences/sec-secret-mounts.mddoc · 3,057 bytesreferences/sec-ssh-mounts.mddoc · 3,853 bytesreferences/stage-copy-artifacts-only.mddoc · 1,702 bytesreferences/stage-named-stages.mddoc · 1,287 bytesreferences/stage-parallel-branches.mddoc · 2,226 bytesreferences/stage-reusable-base.mddoc · 2,177 bytesreferences/stage-separate-build-runtime.mddoc · 1,476 bytesreferences/stage-target-builds.mddoc · 2,103 bytes
Read excerpt
# Dockerfile Optimization Best Practices
Comprehensive Dockerfile optimization guide sourced exclusively from official Docker documentation. Contains 48 rules across 8 categories, prioritized by impact to guide automated refactoring and code generation.
## When to Apply
Reference these guidelines when:
- Writing new Dockerfiles or modifying existing ones
- Optimizing Docker build times (layer caching, cache mounts, context management)
- Reducing Docker image size (multi-stage builds, minimal base images)
- Hardening container security (secret mounts, non-root users, attestations)
- Setting up CI/CD pipelines with Docker builds
- Reviewing Dockerfiles for anti-patterns