Skip to content

Add ReleaseRun Security Scanners to Containers/Orchestration Web Tools section#525

Open
Matheus-RR wants to merge 1 commit intotrimstray:masterfrom
Matheus-RR:master
Open

Add ReleaseRun Security Scanners to Containers/Orchestration Web Tools section#525
Matheus-RR wants to merge 1 commit intotrimstray:masterfrom
Matheus-RR:master

Conversation

@Matheus-RR
Copy link

What this adds

ReleaseRun Security Scanners — browser-based security scanners for IaC and container configurations.

Added to: Containers/Orchestration → Web Tools

What it does:

  • Kubernetes YAML Security Linter — 12 checks (runAsRoot, privileged containers, missing resource limits, allowPrivilegeEscalation, hardcoded secrets in env vars, missing seccomp profile). A–F grade.
  • Docker Compose Security Checker — Docker socket mounts, network_mode: host, mutable image tags, DB ports on 0.0.0.0
  • Terraform Security Scanner — hardcoded AWS credentials, open SSH/DB ports, public S3 buckets, unencrypted RDS/EBS
  • GitHub Actions Security Checker — supply chain attack vectors, missing permissions blocks, hardcoded secrets

Paste a config file → get an A–F security grade with specific line-by-line findings. Browser-based, no CLI install, no account needed.

Why it fits here:

Practical browser tool that helps developers catch container and orchestration security issues before deployment — in the same spirit as other tools in this section.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant