How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Resources and tools to assert compliance of containers (rocket, docker, ...).
This project is a security compliance tool and configuration auditor designed to evaluate Docker deployments against industry security benchmarks. It functions as a script-based scanner that identifies misconfigurations and vulnerabilities within both the host operating system and container settings. The tool specifically implements the Center for Internet Security standards for Docker to verify host and container configurations. It enables a hardening workflow by comparing system states against these standards to identify security gaps and document compliance status. The audit engine suppor
Grype is a command-line security scanner designed to identify known vulnerabilities within container images, filesystems, and software manifests. It functions as a software composition analysis tool that detects security flaws in application components and open-source libraries to support supply chain security. The tool distinguishes itself by reconstructing the final state of container images through layered filesystem inspection and normalizing diverse package formats into a unified dependency graph. It maintains a local cache of security advisories synchronized from multiple upstream sourc
Syft is a software bill of materials generator, container image scanner, and software dependency catalog. It analyzes container images and filesystems to produce comprehensive inventories of installed packages and dependencies in standard formats. Additionally, it serves as a software attestation tool and an SBOM format converter. The project distinguishes itself through the ability to create cryptographically signed attestations for software inventories to ensure provenance and integrity. It also provides the capability to transform software bills of materials between different industry sche
#What is drydock?
The main features of zubux/drydock are: Container Security Tools, Security and Compliance.
Projects with overlapping indexed features include: openscap/container-compliance — Resources and tools to assert compliance of containers (rocket, docker, ...). docker/docker-bench-security — This project is a security compliance tool and configuration auditor designed to evaluate Docker deployments against… anchore/grype — Grype is a command-line security scanner designed to identify known vulnerabilities within container images,… appscode/guard. appscode/kubed. anchore/syft — Syft is a software bill of materials generator, container image scanner, and software dependency catalog. It analyzes…