Dockerfile Linter — Security & best-practices checker

Docker Compose Security Audit

unbearable_dev/docker-compose-audit

Audits docker-compose.yml files for security misconfigurations. 25 checks across 9 categories with severity, remediation, and YAML fix snippets. Pay-per-event. MCP-native - call from Claude Desktop, Cursor, n8n, or any MCP client. Built by Unbearable Labs.

Fetches URLs and validates the Strict-Transport-Security (HSTS) response header. Parses directives (max-age/includeSubDomains/preload), flags missing/invalid configuration, and checks common best practices. Outputs per-URL results plus SUMMARY and REPORT.

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

Audit Dockerfiles for root execution, mutable images, embedded secrets, download-to-shell, unsafe permissions, remote ADD and weak package installation patterns.

Check websites for security.txt, extract security contacts, expiry, policy, hiring and compliance fields.

Security.txt Checker - Website Security Contacts

benthepythondev/security-txt-checker

Check websites for security.txt disclosure files and extract contacts, policies, encryption keys, expiry dates and raw security metadata.

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Analyze HTTP security headers of any website. Check for Content-Security-Policy, HSTS, X-Frame-Options, and 15+ other security headers. Includes security ratings and recommendations. Essential for security audits and compliance testing.

Software supply chain risk API and requirements.txt security scanner for Python packages, npm packages, Docker images, lockfiles, SBOMs, and Dockerfiles.