Skip to content

index.md

Latest commit

 

History

History
102 lines (76 loc) · 5.47 KB

index.md

File metadata and controls

102 lines (76 loc) · 5.47 KB
Raw
layout col-sidebar
title OWASP DockSec
tags docksec
level 3
type documentation

OWASP Lab OWASP Code Slack Build Status

License Last Commit Contributors

Forks Stars PyPI Downloads

Issues Pull Requests

Created

DockSec Logo
OWASP Logo

DockSec

AI-powered Docker security scanner that explains vulnerabilities in plain English

What is DockSec?

DockSec is an OWASP Lab Project that bridges the gap between complex security scan results and actionable developer fixes. It integrates industry-standard scanners (Trivy, Hadolint, Docker Scout) with advanced AI to provide context-aware security analysis.

Instead of overwhelming you with a list of 200+ CVEs, DockSec:

  • Prioritizes what actually affects your specific container setup.
  • Explains vulnerabilities in plain English, not just security jargon.
  • Suggests specific, line-by-line fixes for your Dockerfile.
  • Generates professional, interactive security reports for your team.

Think of it as having a security expert sitting right next to you, reviewing your Dockerfiles in real-time.

How It Works

DockSec Workflow

DockSec workflow: From scanning to actionable insights

DockSec follows a robust four-stage pipeline:

  1. Scan: Runs Trivy, Hadolint, and Docker Scout locally on your environment.
  2. Analyze: AI correlates findings across all scanners to remove noise and assess real-world impact.
  3. Recommend: Generates human-readable explanations and specific remediation steps.
  4. Report: Exports actionable results in JSON, PDF, HTML, or Markdown formats.

Features

  • Smart Analysis: AI explains what vulnerabilities mean for your specific setup.
  • Multi-LLM Support: Use OpenAI, Anthropic Claude, Google Gemini, or local models via Ollama.
  • Deep Integration: Combines Trivy (vulnerabilities), Hadolint (linting), and Docker Scout.
  • Security Scoring: Get a 0-100 score to track your security posture over time.
  • Rich Reporting: Professional exports in HTML (interactive), PDF, JSON, and CSV.
  • CI/CD Ready: Designed for easy integration into GitHub Actions and build pipelines.
  • GitHub Action: Available on the GitHub Marketplace for automated security scans.

Community and Social Media

If DockSec helps you, give it a ⭐ to help others discover it!
Built with ❤️ by Advait Patel and the OWASP community.