Skip to content
OpenAdvisories

Package · GitHub Actions

tmatens/compose-lint

7 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Action

    compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. Prior to 0.31.0, compose-lint prints attacker-controlled service names, environment keys, file lines, and other Compose text without neutralizing G…