compose-lint

Security linter for Docker Compose files that catches misconfigurations before production.

Pluginfreeglobal

compose-lint is a free, open-source security linter for Docker Compose files that catches misconfigurations like privileged containers, unpinned images, exposed sockets, and hard-coded credentials, auto-fixing unambiguous findings with a dry-run preview first. Grounded in OWASP and CIS Docker Benchmark rules, it's aimed at developers and platform teams who want a fast, zero-config pre-merge security gate specifically for Compose files.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of compose-lint - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim compose-lint to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether compose-lint (or something else) actually fits.

Try a problem