Dockerfile Stage Dependency Inspector
Trace literal build-stage dependencies and a selected target in a restricted Dockerfile, without building images.
Loading tool…
How to use Dockerfile Stage Dependency Inspector
Trace literal build-stage dependencies and a selected target in a restricted Dockerfile, without building images. Find which declared stages feed FROM and COPY --from references. Inspect the target dependency closure, external source tokens and a concrete cycle witness while keeping every command inert.
- Provide dockerfile: literal from/copy profile, optional target stage name or zero-based index.
- Choose the supported mode and run the tool. Review its assumptions and any reported errors.
- Copy the result or download a separate output; reset to clear the current form.
Good to know
- 100 KB UTF-8, 3,000 physical lines, 1,500 instructions, 50 stages and 500 stage-reference instructions. A logical instruction is at most 10,000 characters. Standard LF/CRLF and top-of-file backslash/backtick escape directives are supported. Continuation follows the inspected BuildKit boundary: only SP/TAB may follow a terminal escape, and an immediately preceding escape prevents joining, even in odd runs of three or more.
- Selected literal-stage profile only. FROM bases/platforms and COPY --from targets cannot use build-argument expansion. Here-documents, ONBUILD, RUN --mount and custom frontends/instructions are refused instead of guessing dependency behavior.
- FROM may inherit a previously named stage; COPY --from may name any declared stage or zero-based stage index. Unmatched literal COPY sources are reported as external images or named contexts without assuming which exists.
- Shell bodies and most instruction arguments remain opaque text. COPY JSON path arrays receive structural checks, but file existence, path/glob expansion, image reference syntax and complete Dockerfile validity are not established.
- The default target is the last stage. A closure is structural input, not a predicted cache hit, execution order, image size or successful build. Commands, files, images, registries and external contexts are never accessed.
- Inputs are processed on this device and are not automatically saved or uploaded.
Common questions
Does an acyclic report mean Docker can build this file?
No. It describes only the declared literal stage graph in the supported profile. Valid image names, source files, command behavior, build arguments, inherited image triggers and engine/frontend rules still require separate authorized build testing.
Does this change my original input?
No. The tool returns a separate result. Review that output before using it in another application.
Keep going with related tools
All developer →Compose Explicit Dependency Inspector
Trace explicit depends_on relationships in a self-contained services-only Compose model without starting containers.
DeveloperNpm Dependency and Lock Metadata Inspector
Compare package.json dependency declarations with an npm lockfile and inspect repeated versions and install-script metadata.
DeveloperGitignore Rule Tester
Evaluate ordered gitignore rules against supplied relative paths.
DeveloperKubernetes Resource Reference Explorer
Trace selected Pod-template references and potential Service label matches across a supplied local manifest bundle.
DeveloperNginx Configuration Structure Inspector
Map directive blocks, include statements and server declarations from one local Nginx configuration without running it.