Dockerfile Audit

Name: Dockerfile Audit
Author: UnbearableDev

Server Details

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

Glama couldn't complete the latest health check. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.

If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.

Status: Unhealthy
Uptime: 0.0% over 58 days
OAuth: Works in Glama
Last Tested: 2026-10-14 18:29
Transport: Streamable HTTP
URL
Repository: UnbearableDev/dockerfile-audit
GitHub Stars: 0
Server Listing: dockerfile-audit

Related MCP Connectors

Dockerfile Security AuditOAuth
io.github.tylerscomic-lab
Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.
Code Analysis Security Developer Tools
1
Docker Compose AuditOAuth
io.github.UnbearableDev
Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.
Security Developer Tools Testing & QA Tools
2
IAC Audit PackOAuth
io.github.UnbearableDev
Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.
Code Analysis Security
2
GitHub Actions AuditOAuth
io.github.UnbearableDev
GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.
CI/CD & DevOps Security
2

Related MCP Servers

dockerfile-audit-mcp
Security Code Analysis Developer Tools
tylerscomic-lab
A
license
Not graded
quality
C
maintenance
Enables users to audit Dockerfiles for container-security anti-patterns, including missing USER, baked-in secrets, curl | sh / wget | bash, unpinned base images, and ADD with remote URLs. It parses Dockerfile structure to return risk levels and actionable fixes.
Updated 13 days ago (2026-10-01 23:20 UTC)
MIT
EVIDIQ Bastionofficial
Security CI/CD & DevOps
evidiq
A
license
Not graded
quality
B
maintenance
Audits infrastructure configurations (Dockerfiles, GitHub Actions, Kubernetes, Terraform/Compose) against 14 deterministic security rules, returning BLOCK/REVIEW/PASS verdicts and signing attestations. Helps agents verify deployment configs before applying them.
Updated 2 months ago (2026-08-09 03:03 UTC)
1
MIT
Dockerfile Check
Developer Tools Code Analysis Security
arhancanli
A
license
A
quality
C
maintenance
Enables agents to validate Dockerfiles for build-breaking syntax errors, risky patterns like root users and secrets in ENV/ARG, and cache-order problems, returning every finding with its line and a fix. It also verifies referenced container images against public registries, reporting tag existence, digests to pin, supported platforms, last rebuild time, and end-of-life status with an upgrade tag.
Updated 10 days ago (2026-10-04 18:33 UTC)
2
MIT
github-actions-audit
CI/CD & DevOps Security
UnbearableDev
F
license
Not graded
quality
D
maintenance
Audits GitHub Actions workflow files for supply-chain risks like script injection, leaked tokens, unpinned actions, and broad permissions.
Updated 4 months ago (2026-06-11 08:10 UTC)
-