Hank

Hank is an offline Docker build and docker-compose auditor and fixer.

It builds a ghost Docker image, analyzes your Dockerfile and compose config, detects common issues, and writes:

• report.txt - build log and analysis
• patches.diff - suggested fixes
• .drhank.env.template - discovered env var keys to populate

Requirements

• python3 available on PATH
• PyYAML installed in the Python environment used by python3
• Docker daemon available for audit mode

Install via npm

npm install -g drhank

Then from any project root:

drhank audit .
# or static checks only
drhank doctor .

If you call just:

drhank .

it behaves like:

drhank audit .

Install via pip

pip install drhank
drhank audit .

Typical workflow

1. Run Hank:

   drhank audit .

2. Inspect artifacts:

   • report.txt
   • patches.diff
   • .drhank.env.template

3. Create and populate env file:

   cp .drhank.env.template .drhank.env
   $EDITOR .drhank.env

4. Apply patches:

   patch -p0 < patches.diff

5. Rebuild with your normal workflow:

   docker compose up --build

Certificate handling

If Hank detects TLS or certificate problems in the build log, it will add:

volumes:
  - ${HANK_CA_DIR:-./certs}:/usr/local/share/ca-certificates/drhank-ca:ro

Place your corporate CA bundle or PEM files in ${HANK_CA_DIR} (default ./certs).

For build-time trust as well as runtime, extend your Dockerfile:

COPY certs /usr/local/share/ca-certificates/drhank-ca
RUN update-ca-certificates