aquasecurity/docker-bench
Checks whether Docker is deployed according to security best practices as defined in the CIS Docker Benchmark
GoApache-2.0
Issues
- 2
Retracted library (k8s.io)
#98 opened by hutchYy - 3
Test 1.1.8 produce false positive
#118 opened by cesan3 - 0
Docker version errors applicable to CIS 1.3.1
#115 opened by y4ney - 1
- 1
id:1.1.8(cis-1.3.1) was a False Alarm in detection.
#110 opened by y4ney - 1
id:1.1.9(cis-1.3.1) was a False Alarm in detection.
#112 opened by y4ney - 1
id:5.30 was a False Negative in detection.
#108 opened by y4ney - 0
- 0
id: 5.5 description: "Ensure sensitive host system directories are not mounted on containers Not effective
#105 opened by hatjwe - 0
- 0
Test 4.5 isn't intuitive output
#96 opened by yoavrotems - 0
Some test could be tested in two ways
#95 opened by yoavrotems - 1
- 0
- 2
If we are using Kubernetes, do we still need to run this tool to check if our Docker is compliant?
#91 opened by daxin09pp - 1
- 0
--version is misleading
#83 opened by yoavrotems - 4
Support JSON config
#45 opened by lizrice - 6
CIS Benchmarks -- Docker Hosts -- 1.1 Ensure a separate patition for containers has been created
#68 opened by amitaqua - 4
CIS Benchmarks -- Docker Hosts --3.8
#63 opened by amitaqua - 3
- 1
- 1
CIS Benchmarks -- Docker Hosts -- 2.18、Ensure containers are restricted from acquiring new privileges
#64 opened by amitaqua - 1
- 0
Default version is always 17.06
#78 opened by yoavrotems - 3
Find a bug: app.go [line:96]
#75 opened by LinanV - 0
Add bitmask use
#73 opened by yoavrotems - 0
CIS Benchmarks -- Docker Hosts --2.13 Ensure operations on legacy registry (v1) are Disabled
#67 opened by amitaqua - 0
Update go mod
#69 opened by yoavrotems - 0
- 1
- 2
Create a release
#33 opened by mrueg - 1
Support for CIS Docker benchmark 1.2.0
#56 opened by lizrice - 2
Test Info - Show Host Information
#4 opened by jerbia - 1
- 2
- 2
- 0
Set up CI for this project
#22 opened by lizrice - 2
Even more common code with kube-bench
#5 opened by lizrice - 1
- 3
Docker bench for version 18.06.1-ce
#38 opened by VineethReddy02 - 1
Not scored checks
#8 opened by jerbia - 0
Empty check 4 for ocp-3.9 should be removed
#18 opened by lizrice - 0
Replace boilerplate help
#17 opened by lizrice - 7
Add profile to Docker 1.13
#10 opened by jerbia - 0
- 0