dockersec

dockersec is an efficient, offline CLI security scanner designed specifically for Dockerfiles and docker-compose files. Built in Go and shipped as a single binary, it enables developers to quickly identify security issues locally without relying on internet connectivity, making it ideal for secure environments. With 28 built-in rules, dockersec provides comprehensive coverage of common security best practices, alerting users to potential vulnerabilities before deployment. Its seamless integration with GitHub Actions further streamlines secure CI/CD workflows, ensuring that Docker configurations are consistently checked during development cycles. This tool is particularly beneficial for DevOps teams, security engineers, and developers who prioritize container security and require a fast, reliable, offline solution to maintain best practices in containerized environments.