{"adoption": {"forks": 1039, "observed_at": "2026-08-28T04:10:36.791611+00:00", "stars": 9693}, "canonical_url": "https://ross.abutalabs.com/products/docker-bench-security", "card": {"archived": false, "artifact_type": "cli-tool", "description": "The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.", "domain": ["security", "self-hosted"], "enriched": true, "function": ["security", "vulnerability-scanning", "developer-tools", "cli"], "health_score": 75, "homepage": null, "language": "Shell", "license": "Apache-2.0", "license_family": "permissive", "maturity": "active", "member_repos": ["docker/docker-bench-security"], "name": "docker/docker-bench-security", "platform": ["cli"], "pushed_at": "2026-06-04T18:11:52+00:00", "repo": "docker/docker-bench-security", "stars": 9693, "tags": ["docker", "cis-benchmark", "security-audit", "shell-script", "container-security", "hardening", "containers", "devops", "linux"], "topics": [], "urls": [], "use_cases": ["audit my docker host against CIS benchmark", "check container security best practices before production", "find misconfigurations in docker daemon setup", "run automated security checks on docker deployment", "harden docker containers in production", "self-assess docker security posture"], "what_it_is": "Docker Bench for Security is a shell script that automates checks of Docker hosts and containers against the CIS Docker Benchmark best practices. It can be run directly on the host or as a privileged Docker container to self-assess production deployments.", "when_to_avoid": ["you need vulnerability scanning of container images (use Trivy or Clair instead)", "you need runtime threat detection or continuous monitoring rather than point-in-time audits", "you are not using Docker (e.g., Podman or Kubernetes-only environments)"], "when_to_choose": ["you deploy Docker containers in production and want automated CIS benchmark compliance checks", "you need a lightweight, script-based security audit with no complex setup", "you want an official Docker-maintained tool for host and container hardening assessment"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/docker-bench-security", "repo": "docker/docker-bench-security", "role": "main", "score": 61}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:10:36.791611+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T17:21:16.091836+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ab4926037a7ee5e831299eeef1332b87f5efb05b8774eeb1169fd5583bf8d7d4", "fetched_at": "2026-08-28T04:10:36.791611+00:00", "kind": "readme", "missing": false, "url": "https://github.com/docker/docker-bench-security"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:10:36.791611+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T17:21:16.091836+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ab4926037a7ee5e831299eeef1332b87f5efb05b8774eeb1169fd5583bf8d7d4", "fetched_at": "2026-08-28T04:10:36.791611+00:00", "kind": "readme", "missing": false, "url": "https://github.com/docker/docker-bench-security"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T17:21:16.091836+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ab4926037a7ee5e831299eeef1332b87f5efb05b8774eeb1169fd5583bf8d7d4", "fetched_at": "2026-08-28T04:10:36.791611+00:00", "kind": "readme", "missing": false, "url": "https://github.com/docker/docker-bench-security"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:10:36.791611+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:10:36.791611+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:10:36.791611+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T17:21:16.091836+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ab4926037a7ee5e831299eeef1332b87f5efb05b8774eeb1169fd5583bf8d7d4", "fetched_at": "2026-08-28T04:10:36.791611+00:00", "kind": "readme", "missing": false, "url": "https://github.com/docker/docker-bench-security"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:10:36.791611+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:10:36.791611+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T17:21:16.091836+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ab4926037a7ee5e831299eeef1332b87f5efb05b8774eeb1169fd5583bf8d7d4", "fetched_at": "2026-08-28T04:10:36.791611+00:00", "kind": "readme", "missing": false, "url": "https://github.com/docker/docker-bench-security"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:10:36.791611+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:10:36.791611+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:10:36.791611+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T17:21:16.091836+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ab4926037a7ee5e831299eeef1332b87f5efb05b8774eeb1169fd5583bf8d7d4", "fetched_at": "2026-08-28T04:10:36.791611+00:00", "kind": "readme", "missing": false, "url": "https://github.com/docker/docker-bench-security"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:10:36.791611+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:10:36.791611+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T17:21:16.091836+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ab4926037a7ee5e831299eeef1332b87f5efb05b8774eeb1169fd5583bf8d7d4", "fetched_at": "2026-08-28T04:10:36.791611+00:00", "kind": "readme", "missing": false, "url": "https://github.com/docker/docker-bench-security"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T17:21:16.091836+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ab4926037a7ee5e831299eeef1332b87f5efb05b8774eeb1169fd5583bf8d7d4", "fetched_at": "2026-08-28T04:10:36.791611+00:00", "kind": "readme", "missing": false, "url": "https://github.com/docker/docker-bench-security"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T17:21:16.091836+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ab4926037a7ee5e831299eeef1332b87f5efb05b8774eeb1169fd5583bf8d7d4", "fetched_at": "2026-08-28T04:10:36.791611+00:00", "kind": "readme", "missing": false, "url": "https://github.com/docker/docker-bench-security"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T17:21:16.091836+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "ab4926037a7ee5e831299eeef1332b87f5efb05b8774eeb1169fd5583bf8d7d4", "fetched_at": "2026-08-28T04:10:36.791611+00:00", "kind": "readme", "missing": false, "url": "https://github.com/docker/docker-bench-security"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 85, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 4133, "days_push": 90, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 61, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}