devcontainers

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
reference/service-templates.md

No malicious behavior is evident in this declarative Docker Compose template. It is intended for local development, but contains security weaknesses: hardcoded default credentials, unauthenticated Valkey, disabled OpenSearch security, plaintext service communication, broad host-path mounting potential, and an unpinned RustFS latest image. These settings should not be reused for production or untrusted multi-user environments.

Confidence: 99%Severity: 62%
Audit Metadata
Analyzed At
Sep 15, 2026, 04:55 PM
Package URL
pkg:socket/skills-sh/digitalocean-labs%2Fdo-app-platform-skills%2Fdevcontainers%2F@6dd0eed1704bc747e00cdc00bd5f8f62b54297b832f4d0b200f8a4ca1198e3dd