dive CLI
dive explores Docker and OCI image layers, highlights file changes and estimates wasted space for inspection or CI checks.
- 54,699 ★ on the repository
- Last commit
- MIT
Extended access
Why this level
- Analysis may use container-engine access and registry credentials from the user environment.
Install
Manual install
DIVE_VERSION=$(curl -sL "https://api.github.com/repos/wagoodman/dive/releases/latest" | grep '"tag_name":' | sed -E 's/.*"v([^"]+)".*/\1/')
curl -fOL "https://github.com/wagoodman/dive/releases/download/v${DIVE_VERSION}/dive_${DIVE_VERSION}_linux_amd64.deb"
sudo apt install ./dive_${DIVE_VERSION}_linux_amd64.debFirst Installation block for Ubuntu/Debian using a deb package, preserved verbatim for source review.
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- Analysis may use container-engine access and registry credentials from the user environment.
This is third-party code. Review the repository files before installing.
What it does
dive shows what a container image contains. Select a layer to inspect files added, changed or removed there, identifying duplicates or unnecessary material that increases image size. An interactive interface is complemented by CI mode and JSON export. Images can come from container engines, archives, OCI layouts or registries. Efficiency estimates guide Dockerfile review; the tool does not rewrite builds or establish that image contents are secure.
Who it is for. Container-build engineers investigating image growth and checking wasted space in CI.
Good fit when
- Find the layer behind image growth after a Dockerfile edit.
- Check wasted-space limits in CI.
- Inspect an image archive without running the application.
- Export layer analysis as JSON for reporting.
Not a fit when
- You need vulnerability scanning or proof that no secrets exist.
- An efficiency score must automatically fix the Dockerfile.
- Engine-socket access is forbidden but required by the chosen source.
Example request
Analyze a saved image, identify duplicate-file layers and propose Dockerfile changes without rebuilding.Limitations
Wasted-space metrics are experimental and do not replace investigating image growth. Source support depends on OS and dive build; local Podman storage has additional conditions. Docker access uses its context and credentials, so verify the chosen engine and registry. Snap installation can interfere with an existing apt-installed Docker daemon; avoid mixing these installation paths without reviewing the project guidance.
How to disable. End analysis. Uninstalling dive does not remove images from engines or registries.
FAQ
Must I run the application container?
No. dive inspects image layers. Select an appropriate image source.
Can it run without the interface?
Yes. Use documented CI mode or `--json`.
Can it read OCI archives?
Yes. Select the matching source and check the archive path.
Does efficiency measure vulnerabilities?
No. It measures space and layering; assess security separately.
Why is the wrong platform analyzed?
Select the intended multi-platform variant with `--platform`.
Discussion
No questions or reviews yet.
Related
CLI toolsThe terminal interface presents Docker containers, services and images for user-led investigation with agent assistance.
Docker’s terminal client connects agent commands to containers, images, networks and volumes in the selected environment.
Container by Aerovato
Container
A CLI for persistent per-project Linux workspaces in Docker or Podman that keep the agent away from the rest of your system
Docker Skills
docker-skills
Official Docker skills for agents: Dockerfile and builds, Compose, Sandboxes, Docker Agent and a skill that confirms irreversible actions
nerdctl controls containerd with Docker-like commands for containers and images, including Compose and optional BuildKit builds.
CLI for full-cycle CI/CD to Kubernetes: image builds, Helm-based deploys and container registry cleanup
README in short
Automatic source selection reports where the image came from. JSON includes layer identifiers for comparison.