Question 1

What kinds of files can DevopsFriend analyze?

Accepted Answer

DevopsFriend reviews Dockerfiles, docker-compose.yml files, and .env files. It flags insecure defaults, missing USER directives, pinned-versus-latest image tags, exposed secrets, overly broad port mappings, and other production risks. Each finding comes with a severity, a plain-English explanation of why it matters, and a concrete fix.

Question 2

How does it differ from a plain linter or ChatGPT?

Accepted Answer

Deterministic regex and parser checks run first, so the obvious issues are caught reliably with no hallucination. The AI layer then explains the reasoning behind each finding and writes a hardened rewrite of your file. You get the precision of a linter with the context of an experienced reviewer, and far fewer false positives.

Question 3

Are my configuration files or secrets stored?

Accepted Answer

No. Your files are analyzed during the request and then discarded. We never persist your configs, environment variables, or secrets, and nothing is used to train any model. You can safely review production files.

Question 4

Do I need an account to try it?

Accepted Answer

No. Your first analysis is free with no signup required. Paste a file, get a full report with a copy-ready hardened rewrite, and only create an account if you want to run more analyses or keep a history.

Question 5

How is pricing structured?

Accepted Answer

DevopsFriend uses simple pay-as-you-go credits rather than a recurring subscription. You buy a pack of analysis credits and they do not expire monthly, so you only pay for what you actually use. See the pricing page for current credit packs.

Analyze a config file

Paste your docker-compose.yml

Analysis Results