Focused Compose review
Surfaces privileged mode, host networking, unpinned images, public ports, writable host binds and absent health checks.
Day 041 / DevOps / Docker
Docker Compose Auditor
/ Overview
A dependency-free Python CLI that performs a focused, read-only audit of normalized Docker Compose configuration.
A Compose file can look tidy while still enabling broad container privileges, host networking, floating image tags, public ports or writable host bind mounts. Reviewing those details manually becomes inconsistent, and printing resolved environment values can expose secrets.
/ Provided servicesClear thinking.
Clear thinking.
Practical delivery.
Privacy-conscious evidence
Names services, rules and safe structural evidence while listing environment keys without their configured values.
Read-only operation
Audits one local normalized JSON document without invoking Docker or changing containers and configuration.
/ Solution
Docker Compose Auditor reads bounded JSON from Docker Compose's normalized config output and applies six focused review rules. It reports service names and structural evidence in text or JSON, exposes environment key names without their values, and never invokes Docker, starts containers or edits configuration.
/ Impact
Six focused configuration checks
High, warning and informational severity levels
Environment values omitted
Up to 100 bounded services
Two-megabyte input boundary
Text and JSON output
Ten standard-library tests included
Python standard library
Argparse, pathlib, collections and JSON provide the complete dependency-free command-line workflow.
Docker Compose
Consumes the normalized JSON shape produced by docker compose config rather than implementing an incomplete YAML parser.
Unittest
Ten tests cover each focused rule, privacy boundaries, malformed and oversized inputs, deterministic output and CLI exit codes.