docker/docker-bench-security

Health v2 · maintenance only

Adoption not part of the score

9693 stars · 1039 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Docker Bench for Security is a shell script that automates checks of Docker hosts and containers against the CIS Docker Benchmark best practices. It can be run directly on the host or as a privileged Docker container to self-assess production deployments.

Use cases

• audit my docker host against CIS benchmark
• check container security best practices before production
• find misconfigurations in docker daemon setup
• run automated security checks on docker deployment
• harden docker containers in production
• self-assess docker security posture

When to choose

• you deploy Docker containers in production and want automated CIS benchmark compliance checks
• you need a lightweight, script-based security audit with no complex setup
• you want an official Docker-maintained tool for host and container hardening assessment

When to avoid

• you need vulnerability scanning of container images (use Trivy or Clair instead)
• you need runtime threat detection or continuous monitoring rather than point-in-time audits
• you are not using Docker (e.g., Podman or Kubernetes-only environments)

Facets

cli-tool · maturity active

security vulnerability-scanning developer-tools cli security self-hosted cli docker cis-benchmark security-audit shell-script container-security hardening containers devops linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="docker/docker-bench-security")