Skip to content

Latest commit

 

History

History
75 lines (36 loc) · 1.75 KB

README.md

File metadata and controls

75 lines (36 loc) · 1.75 KB

DockerSec Detection Plugin

DockerSec is a VS Code extension that enables one-click Dockerfile security risk detection and provides detailed explanations of the risk principles and corresponding remediation suggestions. It’s designed to help developers efficiently address real-world security issues, enhance security awareness, and achieve true “security shift-left” in the development lifecycle.

Architecture

architecture

Code Overview

  • plugin_server — Backend services for detection and analysis used by the plugin.

  • plugin_src — Source code of the dockersec_plugin

  • dockersec-0.0.1.vsix — Packaged VSIX file of the plugin ready for installation.

Usage guide

Plugin Servers Configuration

You need to prepare your own GPU-powered cloud server, configure the LLM inference environment, and bind a domain name to it.

Then, place the model weights required by the detect_server component at the following path on the server: data/checkpoints/final_adapter_8B_v3


cd plugin_server/detect_server

uvicorn server:app --host 0.0.0.0 --port 6006



cd plugin_server/analysis_server

python3 ingest.py

uvicorn app:app --host 0.0.0.0 --port 8008

Plugin Parameter Configuration

open plugin_src/src/extension.ts

  1. Replace [Detector_Domain] in the source code with the domain name of the detect_server in your Plugin_server.

  2. Replace [Analyser_Domain] in the source code with the domain name of the analysis_server in your Plugin_server.

Plugin Packaging and Installation

cd dockersec

vsce package

code --install-extension dockersec-0.0.1.vsix

Plugin Usage

Right-click on a Dockerfile, then select: [Check Dockerfile Security]

demo

Enjoy!