jakelamon/Keelix
Fail the build when a Docker Compose stack has a critical security exposure.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| compose | Path to the docker-compose.yml to audit | yes | docker-compose.yml |
| host | Host to probe outside-in (leave empty for static analysis only) | no | "" |
| no-probe | Disable outside-in probing | no | true |
| firewall | Path to a UFW/iptables rules dump to correlate (optional) | no | "" |
| baseline | Path to a previous scan JSON; fail only on NEW criticals (optional) | no | "" |
| version | Keelix version to install | no | latest |
| report | Also write a posture report artifact (md|html|pdf, empty to skip) | no | "" |
Outputs
| name | description |
|---|---|
| json | Path to the JSON scan result |