docker/docker-bench-security

Shell 9.6k stars

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

✓ Synced 2h ago Share on X →

README badge:

[![ngmi](https://ngmi.review/badge/docker/docker-bench-security.svg)](https://ngmi.review/repo/docker/docker-bench-security)

303 Merged PRs

6 days Avg Merge Time

0m Fastest PR

1 year Slowest PR

      #910
      Global Speed Rank
    

PR Size Analysis

Lines changed (additions + deletions) vs review outcomes. Re-sync to populate data for older PRs.

PRs by size

Avg review time (hrs)

Clean approval rate (%)

#	Title	Author	Time	Reviews	Blocks
#559	dist: adjust script imports to be able to use /usr/libexec	@cyphar	3 days	1	✓
#553	modified get_docker_configuration_file_args jq command to remove null response	@spedersen-emailage	21.1h	0	✓
#549	include /run in get_service_file	@konstruktoid	4 days	0	✓
#550	update github action	@konstruktoid	0m	0	✓
#539	check if restart policy is 5 or less	@konstruktoid	4 months	0	✓
#546	Update check ID and add check groups for CIS Controls v8 (v1.6.0 - 06-14-2023)	@martipoe	2 days	1	✓
#543	feat: use SHA instead of tags for base image	@UlisesGascon	1.9h	1	✓
#541	fix537	@halfluke	2 days	0	✓
#540	"above" -> "below"	@ismailarilik	1.4h	1	✓
#536	Update version v1.6.0	@konstruktoid	0m	0	✓
#535	Fix image sprawl miscalculation	@konstruktoid	0m	0	✓
#531	add label filtering config	@lekpamartin	25 days	2	1×
#522	Issue 521 restart policy	@andreagalle	2 months	3	1×
#528	tr is required, not truncate	@konstruktoid	0m	0	✓
#526	update Docker container instructions, remove out-of-date Dockerfiles	@konstruktoid	0m	0	✓
#525	fix: allow get_docker_configuration_file_args to parse minified json	@brsolomon-deloitte	8.4h	7	1×
#520	update slsa gha permissions	@konstruktoid	0m	0	✓
#519	fix version in readme	@konstruktoid	0m	0	✓
#518	update issue assignment gha	@konstruktoid	0m	0	✓
#517	update slsa gha	@konstruktoid	0m	0	✓