Dockerfile, Compose & GitHub Actions linter

Static security and quality lint for build and deploy files: Dockerfiles, docker-compose files and GitHub Actions workflows. Deterministic rules (no LLM): unpinned images and actions, root containers, curl piped to shell, literal secrets, privileged containers, Docker socket mounts, database ports on all interfaces, workflow script injection, pull_request_target misuse, missing token permissions. Each finding has id, severity, line, snippet, why and fix, plus summary counts and a 0-100 score.

How to call

https://ciaudit.genexxis.com

Listed in

Directories this entry was found in.