Identifies and remediates security vulnerabilities in Docker configurations for PHP applications.
The Docker Security Checker is a specialized auditing tool designed to harden containerized PHP environments. It scans Dockerfiles and Docker Compose manifests to detect critical risks such as containers running as root, hardcoded secrets, privileged mode escalation, and missing security capabilities. By mapping findings to OWASP categories and providing immediate remediation patterns, this skill helps developers implement production-grade security standards and minimize the attack surface of their infrastructure.
主な機能
01Scans for insecure networking and unnecessary public port exposures
0245 GitHub stars
03Enforces best practices like image version pinning and read-only filesystems
04Audits Docker Compose for privileged mode and excessive host capabilities
05Detects hardcoded secrets and sensitive environment variables in Dockerfiles
06Identifies containers running without explicit non-root user instructions
ユースケース
01Automating the detection of insecure container patterns during the development lifecycle
02Hardening container configurations before deploying PHP applications to production
03Performing security audits on legacy Docker environments to align with OWASP standards
