compose-security-lint

Lint Docker Compose files for Makefile-first deployment environments using .deploy.env.common + .deploy.env.<ENV_MODE>. Use when validating local/test/prod/custom compose files for image/build declaration, restart, healthcheck, logging, and external network settings.

Compose Security Lint

Resolve compose file from .deploy.env.common + .deploy.env.<ENV_MODE> or lint all inferred compose files.
Validate safety baseline fields.
Enforce extra production checks (deploy.resources).

Command

python3 skills/compose-security-lint/scripts/lint_compose.py --root . --env-mode prod
python3 skills/compose-security-lint/scripts/lint_compose.py --root . --all