How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
This project is a static analysis tool and linter designed to improve the quality, reliability, and portability of shell scripts. By performing deep structural analysis, it identifies common programming pitfalls, syntax errors, and security vulnerabilities before scripts are executed. It functions as an automated code reviewer that enforces best practices and helps developers maintain consistent, robust code across different operating environments. The tool distinguishes itself through its dialect-aware grammar resolution, which adapts its parsing logic based on the specific shell interpreter
Semgrep is a static analysis security testing tool designed to identify vulnerabilities and logic errors by matching source code against declarative patterns. It functions as an automated scanner that integrates into development workflows to detect insecure code patterns and enforce coding standards before deployment. The engine utilizes a language-agnostic intermediate representation and a modular parser architecture to normalize diverse programming languages into a unified format. This allows for consistent rule execution across different codebases, enabling users to perform custom structur
Clair is a container vulnerability scanner that performs static analysis of container images to identify known security vulnerabilities. It functions as an analyzer for OCI and Docker images, indexing their contents to detect security risks and outdated packages without requiring the containers to be running. The tool identifies vulnerabilities by matching indexed container components against security databases to find common vulnerabilities and exposures. This process involves analyzing filesystem layers to track the provenance and versioning of packages across the image hierarchy. The proj
This project is a suite of specialized tools for linting, minifying, analyzing, and managing container images and their associated registries. It provides a set of utilities including an image minifier to reduce image size, a security profiler to harden running containers, an image analyzer for static inspection, and a registry manager for organizing multi-architecture indices. The toolset distinguishes itself through behavior-based optimization and security. It uses dynamic analysis to track executed instructions and file access to remove unused binary data, and records kernel interactions t
Hadolint is a static analysis tool designed to validate container build configurations. It functions as a security scanner and configuration auditor, parsing build instructions into a structured format to identify deviations from security and efficiency standards.
The main features of hadolint/hadolint are: Container Image Analyzers, Container Security Scanners, Security Testing and Auditing, Container Image Optimizers, Static Analysis Rule Engines, Infrastructure as Code Analysis, Build and Version Control, Code Quality Tools.
Open-source alternatives to hadolint/hadolint include: koalaman/shellcheck — This project is a static analysis tool and linter designed to improve the quality, reliability, and portability of… semgrep/semgrep — Semgrep is a static analysis security testing tool designed to identify vulnerabilities and logic errors by matching… coreos/clair — Clair is a container vulnerability scanner that performs static analysis of container images to identify known… docker-slim/docker-slim — This project is a suite of specialized tools for linting, minifying, analyzing, and managing container images and… slimtoolkit/slim — Slim is a comprehensive suite for container lifecycle management, providing tools for image inspection, optimization,… wagoodman/dive — Dive is a command-line tool designed for the analysis and optimization of container images. It functions as a layered…