Dockerfile Security Audit

Name: Dockerfile Security Audit
Author: tylerscomic-lab

Server Details

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

Glama couldn't complete the latest health check. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.

If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.

Status: Unhealthy
OAuth: Works in Glama
Last Tested: 2026-10-02 01:34
Transport: Streamable HTTP
URL
Repository: tylerscomic-lab/dockerfile-audit-mcp
GitHub Stars: 0
Server Listing: dockerfile-audit-mcp

Related MCP Connectors

Dockerfile AuditOAuth
io.github.UnbearableDev
Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.
Code Analysis Security
2
GitHub Actions Security AuditOAuth
io.github.tylerscomic-lab
Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.
1
Docker Compose AuditOAuth
io.github.UnbearableDev
Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.
Security Developer Tools Testing & QA Tools
2
IAC Audit PackOAuth
io.github.UnbearableDev
Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.
Code Analysis Security
2

Related MCP Servers

Dockerfile Check
Developer Tools Code Analysis Security
arhancanli
A
license
A
quality
C
maintenance
Enables agents to validate Dockerfiles for build-breaking syntax errors, risky patterns like root users and secrets in ENV/ARG, and cache-order problems, returning every finding with its line and a fix. It also verifies referenced container images against public registries, reporting tag existence, digests to pin, supported platforms, last rebuild time, and end-of-life status with an upgrade tag.
Updated 4 days ago (2026-09-27 16:16 UTC)
2
MIT
github-actions-audit
CI/CD & DevOps Security
UnbearableDev
F
license
Not graded
quality
D
maintenance
Audits GitHub Actions workflow files for supply-chain risks like script injection, leaked tokens, unpinned actions, and broad permissions.
Updated 4 months ago (2026-06-11 08:10 UTC)
-
dockerfile-audit
Code Analysis Security Developer Tools
UnbearableDev
F
license
Not graded
quality
D
maintenance
An MCP server that audits Dockerfiles for security and quality issues, providing structured reports with severity, line numbers, remediation, and fix snippets.
Updated 4 months ago (2026-06-01 08:14 UTC)
-
EVIDIQ Bastionofficial
Security CI/CD & DevOps
evidiq
A
license
Not graded
quality
B
maintenance
Audits infrastructure configurations (Dockerfiles, GitHub Actions, Kubernetes, Terraform/Compose) against 14 deterministic security rules, returning BLOCK/REVIEW/PASS verdicts and signing attestations. Helps agents verify deployment configs before applying them.
Updated 2 months ago (2026-08-09 03:03 UTC)
1
MIT