Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
This commit is contained in:
Thomas Sjögren 2023-08-25 12:37:35 +00:00
parent 9120d426ce
commit 8da1cc26df
No known key found for this signature in database
3 changed files with 5 additions and 4 deletions

View file

@ -2,12 +2,13 @@
![Docker Bench for Security running](img/benchmark_log.png) ![Docker Bench for Security running](img/benchmark_log.png)
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the [CIS Docker Benchmark v1.5.0](https://www.cisecurity.org/benchmark/docker/). The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the [CIS Docker Benchmark v1.6.0](https://www.cisecurity.org/benchmark/docker/).
We are making this available as an open-source utility so the Docker community can have an easy way to self-assess their hosts and Docker containers against this benchmark. We are making this available as an open-source utility so the Docker community can have an easy way to self-assess their hosts and Docker containers against this benchmark.
Release | CIS | Release | CIS |
:---:|:---:| :---:|:---:|
1.6.0|1.6.0|
1.5.0|1.5.0| 1.5.0|1.5.0|
1.3.6|1.4.0| 1.3.6|1.4.0|
1.3.5|1.2.0| 1.3.5|1.2.0|

View file

@ -7,7 +7,7 @@
# Checks for dozens of common best-practices around deploying Docker containers in production. # Checks for dozens of common best-practices around deploying Docker containers in production.
# -------------------------------------------------------------------------------------------- # --------------------------------------------------------------------------------------------
version='1.5.0' version='1.6.0'
# Load dependencies # Load dependencies
. ./functions/functions_lib.sh . ./functions/functions_lib.sh
@ -36,7 +36,7 @@ usage () {
cat <<EOF cat <<EOF
Docker Bench for Security - Docker, Inc. (c) 2015-$(date +"%Y") Docker Bench for Security - Docker, Inc. (c) 2015-$(date +"%Y")
Checks for dozens of common best-practices around deploying Docker containers in production. Checks for dozens of common best-practices around deploying Docker containers in production.
Based on the CIS Docker Benchmark 1.5.0. Based on the CIS Docker Benchmark 1.6.0.
Usage: ${myname}.sh [OPTIONS] Usage: ${myname}.sh [OPTIONS]

View file

@ -154,6 +154,6 @@ yell "# ------------------------------------------------------------------------
# Docker, Inc. (c) 2015-$(date +"%Y") # Docker, Inc. (c) 2015-$(date +"%Y")
# #
# Checks for dozens of common best-practices around deploying Docker containers in production. # Checks for dozens of common best-practices around deploying Docker containers in production.
# Based on the CIS Docker Benchmark 1.5.0. # Based on the CIS Docker Benchmark 1.6.0.
# --------------------------------------------------------------------------------------------" # --------------------------------------------------------------------------------------------"
} }