audit-docker

Docker Audit

Perform a comprehensive audit of Docker configuration, including architecture, security, performance, and production readiness.

Input Parsing

Parse $ARGUMENTS to extract path, level, and optional meta-instructions:

Format: [path] [level] [-- <meta-instructions>]

Arguments:
- path: Target directory (optional, default: ./)
- level: Audit depth - quick|standard|deep (optional, default: standard)
- -- meta-instructions: Additional focus areas or filters (optional)

Examples:
- /acc:audit-docker
- /acc:audit-docker ./
- /acc:audit-docker deep
- /acc:audit-docker ./ deep
- /acc:audit-docker -- focus on security
- /acc:audit-docker deep -- focus on security
- /acc:audit-docker -- level:deep (backward compatible)

Parsing rules:

1. Split $ARGUMENTS by -- (space-dash-dash-space)
2. First part = positional arguments, Second part = meta-instructions
3. In positional arguments, check if any word is a valid level (quick|standard|deep)
4. If level found → extract it; remaining = path (or default ./)
5. Also accept level:quick|standard|deep in meta-instructions (backward compatibility)
6. Priority: positional > meta-instruction > default (standard)

Pre-flight Check

1. Find Docker artifacts:

   # Dockerfiles
   ls Dockerfile* 2>/dev/null
   ls docker/Dockerfile* 2>/dev/null
   
   # Compose files
   ls docker-compose*.yml docker-compose*.yaml 2>/dev/null
   
   # Docker-related configs
   ls .dockerignore 2>/dev/null
   ls docker/ 2>/dev/null
   ls nginx.conf nginx/ 2>/dev/null
   
   # PHP project info
   cat composer.json 2>/dev/null | head -30
   

2. If no Docker files found:

   • Report "No Docker configuration found"
   • Suggest /acc:generate-docker full to create complete Docker setup

Instructions

Use the acc:docker-coordinator agent to perform the audit:

Task tool with subagent_type="acc:docker-coordinator"
prompt: "Perform comprehensive Docker audit at [PATH]. Audit level: [LEVEL].

Operation: AUDIT

[FOCUS_AREAS if provided]

Use TaskCreate/TaskUpdate for progress visibility. Create tasks for each audit phase.

Audit areas:
1. Dockerfile architecture (multi-stage, layer ordering, BuildKit)
2. Base images and PHP extensions (selection, pinning, compatibility)
3. Docker Compose (services, health checks, networking, environment)
4. Performance (build time, image size, caching, PHP-FPM, OPcache)
5. Security (user permissions, secrets, vulnerabilities, network)
6. Production readiness (health checks, graceful shutdown, logging, monitoring)

Generate a full audit report with:
- Summary table by category
- Issues by severity (Critical/High/Medium/Low)
- Specific recommendations with code examples
- Overall score and risk level"