Dive is a command-line tool designed for the analysis and optimization of container images. It functions as a layered storage inspector, allowing users to decompose image manifests to examine individual filesystem layers and identify opportunities to reduce total image size.
The main features of wagoodman/dive are: Container Image Optimizers, Image Analyzers, Image Layer Analyzers, Filesystem Diffing Engines, Container Efficiency Validators, Continuous Integration Quality Gates, Container Image Analyzers, Container Image Explorers.
Open-source alternatives to wagoodman/dive include: docker-slim/docker-slim — This project is a suite of specialized tools for linting, minifying, analyzing, and managing container images and… slimtoolkit/slim — Slim is a comprehensive suite for container lifecycle management, providing tools for image inspection, optimization,… aquasecurity/kube-hunter — Kube-hunter is a security scanner and vulnerability hunter for Kubernetes clusters. It operates as a cloud-native… christian-korneck/docker-pushrm — "Docker Push Readme" - a Docker CLI plugin to update container repo docs. derailed/k9s — This project is a terminal-based dashboard for managing Kubernetes clusters. It provides a character-based interface… docker/docker-bench-security — This project is a security compliance tool and configuration auditor designed to evaluate Docker deployments against…
This project is a suite of specialized tools for linting, minifying, analyzing, and managing container images and their associated registries. It provides a set of utilities including an image minifier to reduce image size, a security profiler to harden running containers, an image analyzer for static inspection, and a registry manager for organizing multi-architecture indices. The toolset distinguishes itself through behavior-based optimization and security. It uses dynamic analysis to track executed instructions and file access to remove unused binary data, and records kernel interactions t
Slim is a comprehensive suite for container lifecycle management, providing tools for image inspection, optimization, security hardening, and service troubleshooting. It functions as a platform for analyzing containerized applications through both static metadata review and dynamic behavioral probing, enabling users to understand image composition and runtime dependencies. The project distinguishes itself by automating the creation of minimal, production-ready container images. It achieves this by removing unnecessary files and components, flattening image layers, and synthesizing restrictive
"Docker Push Readme" - a Docker CLI plugin to update container repo docs
Kube-hunter is a security scanner and vulnerability hunter for Kubernetes clusters. It operates as a cloud-native penetration tool designed to identify security weaknesses, infrastructure misconfigurations, and exploitable gaps by simulating attacker techniques. The tool distinguishes itself through a dual-mode scanning engine that executes both remote external probes and internal network scans. It features identity-based impersonation, allowing it to use service account tokens and pod identities to simulate security access from specific cluster roles and determine the potential blast radius