← ~/projects
[live]repo ↗
AI Dockerfile + Docker-Compose generator
AST-aware containerisation tool that inspects repository lockfiles and entrypoints to emit hardened, non-root multi-stage Dockerfiles and Compose stacks.
TypeScriptDocker BuildKitGemini APITrivyNode.js
Generic LLM-generated Dockerfiles almost always run as UID 0, leak build secrets across layers, pin mutable tags, and copy entire working trees without a matching .dockerignore.
DevSecOps Policy Enforcement Built In
Instead of prompting a model blindly, this generator extracts deterministic signals from package manifests (pnpm-lock.yaml, Cargo.lock, pyproject.toml, go.mod), synthesizes a multi-stage BuildKit configuration, and validates the output against CIS Docker Benchmark rules (non-root USER, read-only rootfs, dropped Linux capabilities, and pinned base image digests).