dockersec
A fast, offline CLI tool that scans your Dockerfile and docker-compose.yml for security vulnerabilities and bad practices.
An offline CLI security scanner for Docker. Analyzes Dockerfiles and docker-compose files for 28 known vulnerabilities and misconfigurations — root containers, hardcoded secrets, unpinned images, missing resource limits — before anything ships to production.
Copilot says:
AI-generated
Keep your Docker projects shipshape with a speedy offline scanner that hunts down security slip-ups and risky practices right from your terminal—no cloud needed! It’s like having a vigilant security buddy for your Dockerfile and compose files.
Key features:
- 🔥 Offline, lightning-fast CLI scanning
- ⚡ Detects root containers and hardcoded secrets
- 🎯 Flags dangerous Docker patterns like unpinned tags and curl
- 🛠️ Supports custom rules with simple YAML config
This summary was generated by GitHub Copilot based on the project README.