Reviews Dockerfile-style files for container build and runtime security concerns.
The adversary is designed to produce a small number of high-confidence, actionable findings grounded in concrete repository evidence. Its review should be deterministic where possible, explicit about impact, and quiet when the available evidence does not justify a finding.
It evaluates Dockerfile-style build definitions and adjacent ignore context for unsafe build inputs and runtime image configuration.
The complete detector or review inventory is maintained in CHECKS.md.
It owns this packaging or orchestration layer. Adjacent container, Kubernetes, Helm, Kustomize, and secret concerns remain with their specialist adversaries.