Question 1

Why do I need a Kubernetes YAML & Docker security scanner?

Accepted Answer

Misconfigurations in container infrastructure — such as running containers as root, excessive capabilities, or missing resource limits — are the #1 attack vector for hackers. StackVet.sh automates the code review process and hardens your deployments from the first line of code (Shift-Left Security).

Question 2

What security vulnerabilities does the tool detect?

Accepted Answer

Our engine detects everything from dangerous host mounts, open Telnet/FTP ports, and missing Seccomp/AppArmor profiles in Kubernetes, to insecure :latest tags and leaked secrets in Dockerfiles. All rules are based on the CIS Kubernetes Benchmark v1.12.0 and CIS Docker Benchmark v1.6.0.

Question 3

Is StackVet.sh really free and safe to use?

Accepted Answer

Yes! The scanner is a fully browser-based tool. All static code analysis and auto-fixing happens locally in your RAM. This makes StackVet the safest solution for internal corporate security policies. Your code never leaves your machine.

Blog | StackVet