dockerfile-sentinel

lint Dockerfiles for risk

Dockerfile and Docker Compose security linter: root users, unpinned or EOL base images, hardcoded secrets, curl | sh, disabled TLS/GPG checks, sensitive COPY, missing .dockerignore, privileged.

• 316/week
• 1★
• MIT
• v1.1.0
• Supply Chain

Read the full README on GitHub (opens in a new tab)View on npm (opens in a new tab)

• supply-chain-sentinel

  one supply-chain gate

• dead-deps-gauge

  find unused dependencies

• dotenv-sentinel

  validate .env files

• license-sentinel

  enforce licence policy