sc-docker

What problem does it solve?

Docker configurations and runtimes often harbor subtle security misconfigurations, secrets leakage, and image-hardening gaps that raise risk across build, deployment, and runtime environments.

Core Features & Use Cases

• Dockerfile and docker-compose security checks for root users, secrets handling, privilege, health checks, and recommended mitigations.
• Runtime hardening checks including read-only filesystem, dropped capabilities, seccomp/AppArmor profiles, and restricted namespaces.
• Use Case: A DevOps team integrates sc-docker to continuously scan a repository's Dockerfiles and compose files, then generate actionable remediation steps for CI/CD and production environments.

Quick Start

Run sc-docker to scan Dockerfiles and docker-compose files in your repository and report findings.