docker/docker-bench-security

Docker Bench for Security is a command-line utility that assesses a Docker host and its containers against CIS benchmark practices. An operator invokes the script, optionally selects or excludes checks, and receives benchmark findings and log files. The checks span host configuration, Docker daemon settings and files, images, runtime, security operations, Swarm, and Docker Enterprise; community checks are also available. The README documents these capabilities and outputs, but no source excerpts were provided, so internal call relationships and helper-layer responsibilities cannot be verified.