dockleak-ci
Simulate what docker build actually sends to the daemon as the build context,
and catch what your .dockerignore is failing to exclude before a .git
history, a .env file, or a private key ends up baked into an image layer.
- Free, no key needed: checks whether
node_modulesis excluded. Source at https://github.com/growaleaf/dockleak-ci. - Pro ($9, one time): walks the full build context, reports its total size
and largest included files, and flags every
.git,.env*, key/cert file, and.aws/.sshdirectory your.dockerignoremisses. Offline-checked license key — no subscription, no per-seat pricing, no telemetry.
Source is readable at the repo above before you buy.