container.composeDocker Compose security
Checks compose files for privileged services, host namespaces, Docker socket mounts, dangerous capabilities, plaintext secrets, exposed database ports, mutable image tags and missing restart/healthcheck.
- Engine
- Built-in
- Targets
- Container
- Areas
- Security, Supply chain, Reliability
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit image:nginx:1.27 --only container.composeBuilt into openaudit; nothing to install.