devcontainers
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyreference/service-templates.md
LOWAnomalyLOW
reference/service-templates.md
No malicious behavior is evident in this declarative Docker Compose template. It is intended for local development, but contains security weaknesses: hardcoded default credentials, unauthenticated Valkey, disabled OpenSearch security, plaintext service communication, broad host-path mounting potential, and an unpinned RustFS latest image. These settings should not be reused for production or untrusted multi-user environments.
Confidence: 99%Severity: 62%
Audit Metadata