# goodwithtech/dockle

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

Repository: https://github.com/goodwithtech/dockle
Canonical: https://ross.abutalabs.com/products/dockle
Homepage: https://containers.goodwith.tech/
Language: Go
License: Apache-2.0
License Family: permissive
Topics: docker, containers, kubernetes, security, security-tools, security-audit, linter, go, golang, vulnerability
Last push: 2026-08-10T10:38:04+00:00

## Health v2 (maintenance only)
Score: 66/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 97, release rhythm 8, longevity 100
- inputs: {"age_days": 2659, "days_push": 23, "days_rel": 604, "gap_med": null, "n_releases_24m": 1}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3292, forks 166 (observed 2026-08-28T04:07:53.971146+00:00)

## What it is
Dockle is a container image linter written in Go that checks Docker images against security best practices and CIS Benchmarks. It runs as a simple CLI, outputs results as JSON or SARIF, and integrates with CI pipelines.

## Use cases
- lint docker images for security issues
- check container images against CIS benchmarks
- enforce dockerfile best practices in CI
- scan container image for leaked secrets and credentials
- audit docker image before pushing to registry
- get SARIF security scan results for container images

## When to choose
- you want a fast, easy-to-start CLI to audit Docker images for security misconfigurations
- you need CI integration with exit codes and SARIF/JSON output
- you want best-practice checks aligned with CIS Benchmarks

## When to avoid
- you need full CVE/vulnerability scanning of packages - use Trivy or Grype instead
- you need runtime container security monitoring rather than static image linting

## Facets
- artifact type: cli-tool
- maturity: active
- function: linter, security, vulnerability-scanning, cli, developer-tools
- domain: security, developer-tools
- platform: windows, cli, go
- tags: docker-image-linter, cis-benchmarks, container-security, ci-cd, sarif, containers, devops, linux, macos, docker

## Member repositories
- goodwithtech/dockle (main) score 66

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:53.971146+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:22:45.326717+00:00, confidence not recorded.
  - readme: https://github.com/goodwithtech/dockle (fetched 2026-08-28T04:07:53.971146+00:00, sha 231575639837)
  - homepage: https://containers.goodwith.tech/ (fetched 2026-08-29T09:35:40.569417+00:00, sha 8e2f0b736715)
- Data as of 2026-08-30T08:39:29.467469+00:00.