【中文说明】用于审查 Dockerfile 的安全性、镜像体积、构建缓存和运行可靠性，并提出修改版本及忽略文件建议。粘贴 Dockerfile，补充应用类型与构建环境，即可排查高权限运行、密钥泄露、缓存失效和依赖安装等问题。 Reviews Dockerfiles for security, image size, build cache, and runtime reliability: secrets baked into layers, running as root, unpinned base images, curl piped to a shell, ADD misuse, leftover apt and pip caches, cache-busting dependency installs, shell-form CMD, and missing multi-stage builds or health checks, then writes a corrected Dockerfile and .dockerignore. Use when a user shares a Dockerfile and asks "review my Dockerfile", "why is my image so big?", or "is this container secure?".
