dockle
Container image linter that checks Docker images against CIS Benchmarks and best practices. Scans for secrets, unnecessary packages, setuid files, and more. Supports JSON and SARIF output formats for CI/CD integration. Written in Go.
Source
https://github.com/goodwithtech/dockle
Tags
- dockle
- docker
- container
- security
- lint
- cis-benchmark
- go
- devsecops
- ci-cd
- audit
Installation
- brew install goodwithtech/r/dockle
- Or download binary from https://github.com/goodwithtech/dockle/releases
- Verify: dockle --version
About SuperCLI
This plugin is part of the SuperCLI ecosystem - a unified CLI plugin manager for AI agents and developers.
Discover, install, and orchestrate thousands of command-line tools with SuperCLI.
