The safeguards map / 1.1 Code and dependencies
OWASP DockSec
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A scanner that checks Dockerfiles, Docker Compose files and container images, merges the results of Trivy and Hadolint, and suggests line-level fixes.
Where it sits
1.1 Code and dependencies (primary): Scans Dockerfiles, Docker Compose files and container images with open-source scanners, merges and ranks the findings, and writes reports with suggested fixes.
helps developers find and fix security problems in Dockerfiles, Docker Compose files, and container images
captured
Available as a command-line tool, a Python package on PyPI, and a GitHub Action for CI/CD pipelines
captured
DockSec runs established open-source scanners, including Trivy and Hadolint, locally on your machine.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make it
- Runs
- by handin CI
Handoffs
produces Findings: SARIF
produces Software and AI inventory: CycloneDX SBOM
Collector's note
An AI layer explains findings and suggests fixes, and the project page says secrets are redacted before content goes to an AI provider; only the scanning and reporting function is mapped.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.