Stateless static analysis of Dockerfiles for security pitfalls, unpinned tags, layer explosion, root user execution, and cache optimization.