Awesome Cloud Native
Section: Security & Compliance · The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
FreshScore 87
Entry
docker-bench-security
Appears in 5 awesome lists
script that checks for dozens of common best-practices around deploying Docker containers in production, inspired by the CIS Docker Community Edition Benchmark v1.1.0.
Open github.comdocker/docker-bench-security
Found in these lists
Awesome Devsecops
Section: Infrastructure as Code Analysis · Docker - The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
StaleScore 52
Awesome Docker
Section: Security · Script that checks for dozens of common best-practices around deploying Docker containers in production.
FreshScore 92
Awesome Linux Containers
Section: Tools · The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
StaleScore 52
awesome-security-hardening
Section: Docker · script that checks for dozens of common best-practices around deploying Docker containers in production, inspired by the CIS Docker Community Edition Benchmark v1.1.0.
FreshScore 83
Often listed next to it
Darkmoon
🟢⚠️ — Autonomous AI penetration-testing platform that orchestrates specialized web, AD, Kubernetes, CMS, and framework agents through an MCP-controlled Docker toolbox with local privacy-tokenization for sensitive target data. — note: GPL-3.0 licensed; heavy Docker/LLM stack, use only for…;…
In 10 listsDetails
Trivy
A Simple and Comprehensive Vulnerability Scanner for Containers and other Artifacts, Suitable for CI. Trivy detects vulnerabilities of OS packages (Alpine, RHEL, CentOS, etc.) and application dependencies (Bundler, Composer, npm, yarn, etc.). Checks containers and filesystems.
In 9 listsDetails
Keycloak
🆓 Open-source Identity and Access Management. Supports OIDC, OAuth 2 and SAML 2, LDAP and AD directories, password policies.
In 7 listsDetails
Checkov
Static analysis for infrastructure as code manifests (Terraform, Kubernetes, Cloudformation, Helm, Dockerfile, Kustomize) find security misconfiguration and fix them.
In 7 listsDetails
brood-box
🟢 — Experimental runner for coding agents in hardware-isolated microVMs with copy-on-write workspace snapshots, egress profiles, selective secret forwarding, and file-by-file review before applying changes. (Stacklok) — note: APIs and behavior are explicitly experimental; workspace-mode=direct…
In 6 listsDetails