goodwithtech/Dockle - Container Image Linter
Scans container image configurations
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| image | target container image name | yes | — |
| output | output file name | no | "" |
| exit-code | exit code when alert were found | no | 1 |
| exit-level | change ABEND level when use exit-code=1 | no | warn |
| format | output format (list, json, sarif) | no | list |
| ignore | comma-separated list of code | no | "" |
| accept-key | For CIS-DI-0010. You can add acceptable keywords. e.g) GPG_KEY,KEYCLOAK | no | "" |
| accept-file | For CIS-DI-0010. You can add acceptable file names. e.g) id_rsa,config.json | no | "" |
| accept-file-extension | For CIS-DI-0010. You can add acceptable file extensions. e.g) pem,log | no | "" |
| sensitive-word | For CIS-DI-0010. You can add sensitive keywords to look for. e.g) -ak api_password -sw keys | no | — |
| quiet | suppress log output | no | — |
| no-color | disabling color output | no | — |
| timeout | docker timeout. e.g) 5s, 5m... | no | 10m |
| use-xdg | Docker daemon host file XDG_RUNTIME_DIR | no | — |
| host | docker daemon host | no | — |
| authurl | registry authenticate url | no | — |
| username | registry login username | no | — |
| password | registry login password. Using --password via CLI is insecure. | no | — |
| insecure | registry connect insecure | no | — |
Outputs
no outputs