ComposeGuard Docker Compose Security Analyzer

Overview

Deterministic parsed Docker Compose runtime analysis for privileged execution, host namespace and device access, capabilities and confinement, runtime user and filesystem controls, literal secrets, public ports, host mounts, image and build immutability, resource limits, health, logging, and external resources. It never contacts Docker, reads env or host files, starts containers, pulls images, executes builds, or returns secret values.

Health