Tools
dockle
goodwithtech/dockle
Dockle is a container image linter that audits Docker images against CIS benchmarks and best practices, reporting FATAL, WARN, and INFO findings with remediation guidance for secure image builds.
Topics
Related projects
ContainerSSH3.1kContainerSSH is an SSH server that launches a fresh container for each login, with pluggable authentication and configuration webhooks, Docker/Kubernetes backends and audit logging for labs, debugging access and honeypots.
trivy39.3kA comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
slim23.5kA container optimization toolkit that inspects application behavior to minify images by up to 30x and generate tighter security profiles.
grype13.3kGrype is a vulnerability scanner for container images, filesystems and SBOMs. It covers major OS and language package ecosystems, supports Docker, OCI and Singularity formats, and prioritizes risk with EPSS, KEV and OpenVEX filtering.
dokku32.2kA Docker-powered mini-Heroku PaaS that helps you build, deploy, and manage applications on your own server.
gitleaks31kA fast CLI scanner that finds passwords, API keys, and tokens leaked in git repos, files, and CI pipelines.