Dockerfile Lint
Lint Dockerfiles for root users, latest tags, secrets in ENV or ARG, missing HEALTHCHECK and more.
Servidor MCP · de basitalisandhu
Resumo
Dockerfile Lint é um servidor MCP publicado por basitalisandhu. Marketplaces que lemos e que o listam: 1 (Official MCP Registry). A última mudança que registramos foi em 2026-10-13. Conforme nossa passagem pelos marketplaces em 2026-10-16.
O que pede
- Roda na sua máquina
Nenhum dos marketplaces que lemos publica as ferramentas ou as configurações que ele pede.
O que declara, pede e executa, por completo
Instale apenas plugins de desenvolvedores em quem você confia. Mostramos o que os marketplaces publicam e não testamos plugins.
Funciona com
- Claude Code
- Codex
- Cursor
- VS Code
- Copilot CLI
Um link de um clique abre o cliente, que pede confirmação antes de adicionar o servidor.
Pelos marketplaces que o listam e pelo transporte MCP que declara, conforme cada cliente documenta. Não testamos plugins.
Conectar
Comandos e configurações gerados apenas a partir do que os marketplaces declaram. Não os executamos por você e não testamos plugins.
Como servidor MCP local: imagem Docker
Gerado a partir do que Official MCP Registry declara.
claude mcp add --transport stdio mcp-dockerfile-lint -- docker run -i --rm ghcr.io/basitalisandhu/mcp-dockerfile-lint:0.2.1[mcp_servers.mcp-dockerfile-lint]
command = "docker"
args = ["run", "-i", "--rm", "ghcr.io/basitalisandhu/mcp-dockerfile-lint:0.2.1"]{
"mcpServers": {
"mcp-dockerfile-lint": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/basitalisandhu/mcp-dockerfile-lint:0.2.1"
]
}
}
}docker run -i --rm ghcr.io/basitalisandhu/mcp-dockerfile-lint:0.2.1Onde está publicado
| Marketplace | Status | Versão | Números | Verificado | Visto pela primeira vez |
|---|---|---|---|---|---|
| Official MCP Registry (Abrir o registro) | Listado | 0.2.1 | Forks (GitHub): 1 Estrelas (GitHub): 1 |
Sem marcação |
Cada número é do próprio marketplace e nunca é somado entre marketplaces. Um marketplace que não publica números não mostra nenhum: sem número não é zero.
O que mudou
- Official MCP Registry: lançou a versão 0.2.1 (antes 0.2.0)
- Official MCP Registry: repositório ou pacote mudou
Plugins semelhantes
Produtos cujos próprios nomes, descrições, ferramentas e skills são os mais próximos deste pelo significado, em todos os marketplaces que lemos. A proximidade é ordenada apenas dentro desta lista.
-
Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.
-
base-image-eol-lint io.github.jmshinhwa/base-image-eol-lint
Marks every base image in your Dockerfiles, compose files and CI workflows whose security patches ha
-
Audit Dockerfiles and docker-compose for security best practices
-
container-hardening-800-190 io.github.jmshinhwa/container-hardening-800-190
Reads a Dockerfile or compose file and names the hardening controls it fails, with the NIST SP 800-1
-
docker io.github.rog0x/docker
Docker container management and Dockerfile analysis
-
Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.
-
Build a container image from a Dockerfile, scan it for security vulnerabilities with Trivy, and auto-clean up. Uses Docker or Podman. No local Trivy install needed - runs Trivy as…
-
Execute dockerfile-credential-mcp
Premium agentic endpoint for dockerfile-credential-mcp.
-
Audit MCP servers for secrets exposure, shell injection, and supply chain risks.
-
mcp-config-auditor io.github.4hmetuyar/mcp-config-auditor
Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats
Plugins semelhantes por marketplace
A mesma pergunta feita a cada marketplace separadamente: existe lá um equivalente deste plugin?
Listado em Claude Code: claude-plugins-community (5)
-
Build a container image from a Dockerfile, scan it for security vulnerabilities with Trivy, and auto-clean up. Uses Docker or Podman. No local Trivy install needed - runs Trivy as…
-
Audit project dependencies, environment configuration, and runtime compatibility across Node, Python, Rust, Go, PHP, Ruby, and Java. Diagnoses version conflicts, lock file drift…
-
Scan your codebase for exposed secrets and API keys, generate .env templates from environment variable usage, validate .env files against .env.example, and rotate secrets. Keeps…
-
Generate Dockerfiles and Kubernetes manifests, debug failing containers and pods, and audit Helm charts and RBAC. Opinionated, safety-conscious workflows for Docker and Kubernetes…
-
latio-secure-supply-chain-skills
Audit and take action to secure your repository against supply chain misconfigurations and malware.
Listado em Claude Code: claude-plugins-official (5)
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check…
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including…
Listado em Claude: knowledge-work-plugins (5)
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
-
Official Buildkite skills for Claude Code, Cursor, and other AI coding agents — pipelines, migration, preflight, agent runtime, CLI, and API
Listado em Codex: openai-curated (openai/plugins) (5)
-
Codex Security workflows for security scans, analysis, and investigation.
-
Inspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
-
Available for US1 customers only. Analyze, investigate, and act on your Datadog telemetry directly from ChatGPT using natural language. Ask questions about your production…
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Inspect recent issues and events in Sentry from Codex.
Listado em Community GitHub marketplaces (5)
-
Audit Dockerfiles and docker-compose for security best practices
-
Audit MCP servers for secrets exposure, shell injection, and supply chain risks.
-
calllint io.github.calllint/calllint
Static preflight safety gate for MCP servers — scan configs before you run them. Never executes.
-
Scan infra configs against CIS benchmarks
-
Scan your codebase for exposed secrets and API keys, generate .env templates from environment variable usage, validate .env files against .env.example, and rotate secrets. Keeps…
Listado em Copilot CLI: github/awesome-copilot (5)
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
-
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…
-
Use Datadog directly in Copilot / VS Code through a preconfigured Datadog MCP server. Query logs, metrics, traces, dashboards, and more through natural conversation.
-
Inspect a repository, improve Tiny Tool Town readiness, submit its listing issue, and launch remediation work.
-
A comprehensive collection of specialized agents for software analysis, impact assessment, structural quality advisories, and architectural review using CAST Imaging.
Listado em Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
mcp-apps
Generate MCP App widgets for MCP tools. Produces self-contained HTML widgets using the MCP Apps protocol.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
Navigate and interact with your C++ code using the Microsoft C++ Language Server.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
Listado em Cursor: cursor/plugins (5)
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Let Grok Bot reach MCP servers on your private Tailscale network. Sign in to Tailscale to connect your tailnet; Grok Bot joins it as one tagged device and only reaches the hosts…
-
Thermo-nuclear branch review: deep security/correctness audits, harsh code-quality rubrics, parallel subagents, thermos orchestration, and optional merge-ready PR flows.
-
Scaffold and validate new agent plugins.
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
Listado em Docker MCP Catalog (5)
-
A Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript.
-
npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
-
AI interface to troubleshoot and observe Kubernetes/Container workloads.
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
-
Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.
Listado em Official MCP Registry (5)
-
Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.
-
base-image-eol-lint io.github.jmshinhwa/base-image-eol-lint
Marks every base image in your Dockerfiles, compose files and CI workflows whose security patches ha
-
container-hardening-800-190 io.github.jmshinhwa/container-hardening-800-190
Reads a Dockerfile or compose file and names the hardening controls it fails, with the NIST SP 800-1
-
docker io.github.rog0x/docker
Docker container management and Dockerfile analysis
-
Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.
Encontrados pelo significado, não por código ou repositório em comum: plugins semelhantes continuam sendo produtos distintos, e isto não é uma avaliação nem uma recomendação.
Quer esta marca no seu plugin em nosso catálogo?
Prove que o mantém com um arquivo no repositório, um arquivo no seu domínio ou um registro DNS, e você poderá mostrar esta marca na ficha, com banners ao vivo para o seu site e o README. Como funciona a verificação
Você também recebe alertas quando um marketplace o publica, o remove, muda a marca de verificado ou o que ele pede, e o endpoint remoto passa a ser monitorado como um serviço web.
Dados de Official MCP Registry. Os números vêm das nossas próprias passagens regulares pelos marketplaces, última leitura em . Não publicamos dados de contato dos editores de plugins.