Problem
The linter container mounts /var/run/docker.sock into the container, but none of the tools inside the linter (shellcheck, ruff, mypy, hadolint, trivy fs) need Docker access. This is a security risk (exposes host Docker socket to linting processes).
Solution
Remove the -v mount from scripts/lint.sh. The linter only runs filesystem-level scans (trivy fs, shellcheck, ruff, mypy, hadolint) and does not need Docker access.
Files
scripts/lint.sh — remove docker.sock volume mountBACKLOG.md — mark Item 9 completed
Problem
The linter container mounts
/var/run/docker.sockinto the container, but none of the tools inside the linter (shellcheck, ruff, mypy, hadolint, trivy fs) need Docker access. This is a security risk (exposes host Docker socket to linting processes).Solution
Remove the
-vmount fromscripts/lint.sh. The linter only runs filesystem-level scans (trivy fs, shellcheck, ruff, mypy, hadolint) and does not need Docker access.Files
scripts/lint.sh— remove docker.sock volume mountBACKLOG.md— mark Item 9 completed