Docker Compose Audit

Name: Docker Compose Audit
Author: UnbearableDev

Server Details

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

If you are the author of this connector, you can claim ownership with GitHub, an HTTP challenge, or a DNS record. Claimed connector authors can inspect health checks, view analytics, and manage their listing.

Status: Unhealthy
OAuth: Works in Glama
Last Tested: 2026-09-15 05:28
Transport: Streamable HTTP
URL
Repository: UnbearableDev/docker-compose-audit
GitHub Stars: 0
Server Listing: docker-compose-audit

Related MCP Connectors

Dockerfile AuditOAuth
io.github.UnbearableDev
Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.
Code Analysis Security
2
GitHub Actions AuditOAuth
io.github.UnbearableDev
GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.
CI/CD & DevOps Security
2
IAC Audit PackOAuth
io.github.UnbearableDev
Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.
Code Analysis Security
2
Kubernetes Manifest AuditOAuth
io.github.UnbearableDev
kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.
Security Networking & Infrastructure Developer Tools
2

Related MCP Servers

EVIDIQ Bastionofficial
Security CI/CD & DevOps
evidiq
A
license
Not graded
quality
B
maintenance
Audits infrastructure configurations (Dockerfiles, GitHub Actions, Kubernetes, Terraform/Compose) against 14 deterministic security rules, returning BLOCK/REVIEW/PASS verdicts and signing attestations. Helps agents verify deployment configs before applying them.
Updated a month ago (2026-08-09 03:03 UTC)
1
MIT
github-actions-audit
CI/CD & DevOps Security
UnbearableDev
F
license
Not graded
quality
D
maintenance
Audits GitHub Actions workflow files for supply-chain risks like script injection, leaked tokens, unpinned actions, and broad permissions.
Updated 3 months ago (2026-06-11 08:10 UTC)
-
GuardX
Security Code Analysis
harshzagade
A
license
Not graded
quality
B
maintenance
A keyless, defensive code-security auditor that scans codebases for hardcoded secrets, audits dependencies for known CVEs, and checks passwords against breach data using k-anonymity.
Updated 3 months ago (2026-06-22 18:07 UTC)
1
MIT
selfhosted-doctor
Security Penetration Testing
Kevin9703
A
license
Not graded
quality
B
maintenance
Read-only MCP server that scans Docker Compose, Cloudflare Tunnel, and .env files for security risks in self-hosted homelabs.
Updated 2 months ago (2026-07-03 10:27 UTC)
10 npm
1
MIT