dockersec

A fast, offline CLI tool that scans your Dockerfile and docker-compose.yml for security vulnerabilities and bad practices.

Screenshot of dockersec

An offline CLI security scanner for Docker. Analyzes Dockerfiles and docker-compose files for 28 known vulnerabilities and misconfigurations — root containers, hardcoded secrets, unpinned images, missing resource limits — before anything ships to production.

Copilot says: AI-generated

Keep your Docker projects shipshape with a speedy offline scanner that hunts down security slip-ups and risky practices right from your terminal—no cloud needed! It’s like having a vigilant security buddy for your Dockerfile and compose files.

Key features:

  • 🔥 Offline, lightning-fast CLI scanning
  • ⚡ Detects root containers and hardcoded secrets
  • 🎯 Flags dangerous Docker patterns like unpinned tags and curl
  • 🛠️ Supports custom rules with simple YAML config

This summary was generated by GitHub Copilot based on the project README.