configuration-security

Security linter for environment variables, Docker, CI, Kubernetes, and runtime configuration.

Offline Docker Compose and Dockerfile security analyzer with policy-as-code, secret-safe reporting, SARIF, scoring, and proposed remediations.

Minimal Node.js template with EnvGuard configuration security scanning.

Minimal Next.js App Router template with EnvGuard configuration security scanning.

Configuration-driven security tool that discovers application dependencies, validates required connectivity, and identifies unnecessary network exposure.

Go CLI and HTTP service for auditing YAML/JSON web-app configurations for insecure settings, weak crypto, exposed secrets, and unsafe permissions.