compose-lint

OpenCloud Compose is a repository of Docker Compose configurations for deploying OpenCloud in different environments. Its modular files combine the core OpenCloud service with Traefik or an external reverse proxy, Let's Encrypt or local certificates, Collabora Online or Euro Office document editing, Keycloak and LDAP identity management, Apache Tika full-text search, Radicale calendar and contacts, monitoring metrics, and ClamAV antivirus scanning. Deployments are selected with Docker Compose `-f` options or the `COMPOSE_FILE` environment variable, with settings such as domains, passwords, storage paths, and service-specific secrets supplied through `.env`. The repository requires Docker and Docker Compose v2, is licensed under GPLv3, and advises using the official OpenCloud documentation for production deployments.

Composio is a developer platform for orchestrating just-in-time tool calls, secure delegated authentication, sandboxed execution environments, and parallel execution across integrations with 1,000+ applications. It is designed to let applications and AI agents invoke external tools safely and at scale.

Dockhand is a Docker management web application by Finsys for managing containers, Compose stacks, and multiple local or remote Docker hosts. It provides real-time container status and resource monitoring, visual Compose editing, Git-based deployment with webhooks and auto-sync, interactive shell access, log streaming, file and volume browsing, image and network management, vulnerability scanning with Grype and Trivy, schedules for pruning and updates, notifications, and activity auditing. Environments can connect through a socket, agent, or direct TCP. The application uses direct Docker API calls, a SvelteKit frontend, a Bun-based backend, and SQLite or PostgreSQL through Drizzle ORM. It is licensed under the Business Source License 1.1, with the repository stating that it converts to Apache 2.0 on January 1, 2029; personal use, internal business use, non-profits, education, and evaluation are permitted, while offering it as a commercial hosted service is not.

Codex Security is an OpenAI CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in authorized code repositories. It scans directories and codebases, including repository changes, uses AI-assisted analysis to trace attack paths and apply custom threat models, validates findings, and can generate reviewable patches and exports in SARIF, JSON, and CSV formats. The CLI supports CI use with an API key and can stop builds at a selected severity threshold. The package also supports configurable deep scans, worker and subagent counts, time limits, containerized bulk scans, and a preview findings service. The service stores findings and embeddings in SQLite, provides paginated listings and a read-only dashboard, identifies potential duplicates through embedding similarity, and allows completed findings to be published and deduplicated through the CLI or SDK. It requires Node.js 22.13.0 or later and Python 3.10 or later, and can use OpenAI or other documented inference providers.

Docker Sandboxes is a Docker security feature for running AI coding agents and tools inside isolated micro virtual machines. Each sandbox has its own kernel, filesystem, and network, allowing agents such as Claude Code to run with reduced access to the host machine.