drop buildah build log · parse layer build sequence
flags secret mounts · privileged build flags · unexpected base image swaps · host bind mounts · pipe-to-shell RUN steps
heuristic screener · buildah/podman log format varies by version — not definitive proof · best-effort STEP/FROM parsing