compose-lint

What people use it for

Checks Docker Compose files for security problems such as privileged containers, exposed ports, Docker socket mounts, unpinned images, and embedded credentials. It runs locally or in CI, exports SARIF, and previews mechanical fixes.

Github Awesome