aif-dockerize
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalytemplates/deploy.sh
LOWAnomalyLOW
templates/deploy.sh
The script is a conventional Docker deployment script, but sourcing `.env` executes arbitrary Bash code and is a significant supply-chain and deployment-integrity risk if the file is attacker-controlled or unexpectedly modified. The Compose files and build contexts are critical unreviewed dependencies. No direct malware behavior is evident in the supplied script. Use a non-executing environment-file parser or strictly controlled configuration permissions, validate required variables, and review the referenced Compose files and Dockerfiles.
Confidence: 98%Severity: 62%
Audit Metadata