chaitin/veinmind-tools

Health v2 · maintenance only

Adoption not part of the score

1652 stars · 186 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

veinmind-tools is a container security toolkit by Chaitin Tech built on the veinmind-sdk, providing scanners for malicious files, weak passwords, known vulnerabilities (log4j2, minio), sensitive information, backdoors, and suspicious shell history in container images. It runs as a parallel container via Docker and can generate HTML, CLI, or JSON reports, with optional OpenAI-based analysis of scan results.

Use cases

• scan docker images for malware and malicious files
• detect weak passwords inside containers
• find log4j2 vulnerabilities in container images
• scan images for leaked secrets and sensitive information
• detect backdoors in container images
• audit suspicious shell history in images
• generate security scan reports in html or

When to choose

• you need to scan local docker/containerd images and containers for security risks before deployment
• you want a plugin-based container security scanner that runs as a sidecar/parallel container
• you need CI-friendly scan reports in multiple formats

When to avoid

• you need runtime security monitoring of live clusters rather than image scanning
• you require a full commercial container security platform with admission control and compliance policies
• your environment has no docker or containerd runtime available

Facets

cli-tool · maturity active

security vulnerability-scanning cli developer-tools security cloud-computing developer-tools go cli container-security image-scanning docker containerd cloud-native malware-detection weak-passwords sensitive-info openai-analysis containers devops linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="chaitin/veinmind-tools")