Docker

Workflow

1. Clarify target environment (dev vs prod), runtime, and constraints (size, security, build speed).
2. Review Dockerfile for reproducibility (pinning), minimal runtime image, and layer hygiene.
3. Enforce security defaults: non-root, least privilege, no secrets in layers, safe filesystem.
4. Review Compose for networking/exposure, healthchecks, startup order, and resource constraints.
5. Validate and automate: docker build, docker compose config, lint, scan, and smoke-run.