Wharflab

Wharflab is a small, engineering-focused publisher whose entire public catalog is currently represented by Tally, a cross-platform Dockerfile linter and formatter that treats PowerShell and Windows containers as first-class citizens. Built for DevOps teams who maintain heterogeneous build pipelines, Tally parses Dockerfiles, surfaces deprecated instructions, enforces security best-practices, and automatically rewrites non-compliant syntax into a consistent, hermetic style. Because it compiles to a native Windows binary, it slots cleanly into PowerShell build scripts, Azure DevOps tasks, and GitHub Actions without requiring WSL or Linux emulation, while still offering Linux and macOS builds for containerized CI workflows. Typical use cases include shifting Dockerfile validation left in the development cycle, unifying base-image tagging conventions across micro-service repositories, and enforcing organizational policies such as non-root users, multi-stage build hygiene, and explicit HEALTHCHECK instructions. The tool can emit SARIF reports for integration with GitHub Security Advisories or Azure Defender, and its opinionated formatter can be tuned through a YAML profile so that different projects can share a single canonical style. Although the Wharflab GitHub organization presently lists only this one utility, its narrow scope is accompanied by rigorous testing on nanoserver and windowsservercore images, making it a dependable addition to Windows-centric container tool-chains. Wharflab’s software is available for free on get.nero.com, where downloads are routed through trusted Windows package sources such as winget, always install the latest release, and may be queued for batch installation alongside other applications.