docker-development
Warn
Audited by Socket on Oct 5, 2026
1 alert found:
SecuritySecurityreferences/dind-testing-patterns.md
MEDIUMSecurityMEDIUM
references/dind-testing-patterns.md
No evidence of malware or intentional malicious behavior is present. The content is legitimate DinD and CI testing guidance, but several examples grant near-host-level control through privileged mode, host cgroup access, read-write mounts, or the Docker socket. The TCP Docker endpoint should use authenticated TLS, and image tags should be pinned to trusted digests. Security risk is elevated when these patterns are used on shared or production hosts.
Confidence: 97%Severity: 72%
Audit Metadata