cr0hn/Dockerfile Security Scan
Scan Dockerfiles for security issues, misconfigurations, and exposed credentials
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jan 29, 2026
- License
- BSD
Pinned Snippet
uses: cr0hn/dockerfile-security@1092e9874d3a78476bb1e10d7754a7b5685a001e # v0.2.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| dockerfile | Path to Dockerfile to analyze | no | Dockerfile |
| categories | Rule categories to run: all, core, credentials, security, packages, configuration (comma-separated) | no | all |
| ignore-rules | Comma-separated rule IDs to ignore (e.g., core-001,cred-006) | no | "" |
| ignore-file | Path to file with rule IDs to ignore (one per line) | no | "" |
| custom-rules | Path to custom rules YAML file or URL | no | "" |
| output-format | Output format: table, json | no | table |
| output-file | Path to save output file (JSON format) | no | "" |
| fail-on-issues | Exit with code 1 if issues are found (for CI/CD) | no | true |
| quiet | Quiet mode (suppress stdout output) | no | false |
| version | Version of dockerfile-sec to use (e.g., v0.2.0, latest) | no | latest |
Outputs
| name | description |
|---|---|
| issues-found | Number of security issues found |
| exit-code | Exit code of the scan (0=success, 1=issues found) |