3 Services from ciaudit.genexxis.com

Statically analyzes a Dockerfile for security and hygiene issues including base image pinning, root user, secret exposure, and more, returning scored findings with line numbers and fix suggestions.

Audits a GitHub Actions workflow file for common security misconfigurations and vulnerabilities, returning scored findings with severity, fix suggestions, and affected lines.

Statically audits a docker-compose file for security misconfigurations including privileged containers, host network/pid/ipc, Docker socket mounts, dangerous capabilities, unpinned images, exposed database ports, hardcoded secrets, missing restart policies, and absent memory limits.