configuration-security

Security linter for environment variables, Docker, CI, Kubernetes, and runtime configuration.

Minimal Node.js template with EnvGuard configuration security scanning.

Minimal Next.js App Router template with EnvGuard configuration security scanning.

Offline Docker Compose and Dockerfile security analyzer with policy-as-code, secret-safe reporting, SARIF, scoring, and proposed remediations.

Configuration-driven security tool that discovers application dependencies, validates required connectivity, and identifies unnecessary network exposure.

Go CLI and HTTP service for auditing YAML/JSON web-app configurations for insecure settings, weak crypto, exposed secrets, and unsafe permissions.