Container Security Benchmark

8 automated checks across 3 domains — Dockerfile best practices, image security, and runtime isolation. Each check mapped to CIS Docker Benchmark and NIST CSF 2.0.

Architecture

flowchart LR
    IMG["Container Config\nDockerfile · Image JSON\nRuntime dumps"]
    BENCH["checks.py\n8 checks · 3 domains"]
    OUT["JSON / Console"]

    IMG --> BENCH --> OUT

    style IMG fill:#1e293b,stroke:#475569,color:#e2e8f0
    style BENCH fill:#164e63,stroke:#22d3ee,color:#e2e8f0