Docker Image Size and Security Optimizer

How It Works

Paste your Dockerfile and get back an optimized version with explanations

for every change. It catches the patterns that turn a 50 MB app into a

1 GB image.

What You Get

• Optimized Dockerfile with multi-stage build if applicable
• Layer ordering optimized for cache efficiency
• Base image recommendations (alpine, distroless, Chainguard)
• Security improvements (non-root user, minimal packages, no secrets in layers)
• .dockerignore generation to speed up build context
• Before/after size comparison (when Docker is available)

Setup Steps

1. Paste your Dockerfile or point your Claw at the file path
2. Review the optimized version and the explanation for each change
3. Build and compare sizes
4. Iterate if you need specific packages or build steps preserved

Tips

• Multi-stage builds are the single biggest win for most Dockerfiles
• Layer ordering matters: put things that change rarely (apt install) before things that change often (COPY . .)
• `docker history` reveals which layers are contributing the most bloat
• If Docker is available, ask your Claw to build both versions and compare