Skip to content
SPECIFICTION
Get listed

Dockle

github.com

Free plan WindowsmacOSLinux
Visit github.com
Spec score 7.8 #12 of 26 in Container Security Software

What it is

Dockle is a free, self-hosted container image linter focused on security and Docker best practices. It scans images for vulnerabilities and checks settings against CIS Docker Image Benchmarks, along with Docker- and Linux-specific issues such as empty passwords and duplicate user or group IDs. Results can be displayed or saved in JSON and SARIF formats. Users can set an exit level and ignore selected checkpoints through command options, environment variables, or a .dockleignore file. The project documents continuous-integration use and provides a GitHub Action, with examples for Travis CI, CircleCI, and GitLab CI. Dockle can access private images in Docker Hub, Amazon ECR, Google Container Registry, and self-hosted registries. It can also scan an image archive created with docker save by using the --input option. Installation routes include Homebrew, Linux distribution packages, Windows binaries, version managers, source builds, and Docker. Dockle runs on Linux, macOS, and Windows and is listed under the Apache-2.0 license.

Spec sheet

Purpose
Dockle is a container image linter for security that helps build best-practice Docker images.Read 8 Oct 2026 · github.com
License
The repository lists the project under the Apache-2.0 license.Read 8 Oct 2026 · github.com
CI support
The project documents CI usage and provides a GitHub Action, with examples for Travis CI, CircleCI, and GitLab CI.Read 8 Oct 2026 · github.com
CIS benchmarks
Its security checkpoints include CIS Docker Image Benchmarks.Read 8 Oct 2026 · github.com
Configurable checks
Users can change the exit level and ignore selected checkpoints using command options, environment variables, or a .dockleignore file.Read 8 Oct 2026 · github.com
Image checks
It checks container images for vulnerabilities and Docker image best practices.Read 8 Oct 2026 · github.com
Image files
Dockle can scan an image archive created with docker save by using its --input option.Read 8 Oct 2026 · github.com
Installation
Installation options include Homebrew, RHEL/CentOS, Debian/Ubuntu, Arch Linux, Windows binaries, version managers, source builds, and Docker.Read 8 Oct 2026 · github.com
Other checkpoints
Dockle also checks Docker-specific and Linux-specific image settings, including empty passwords and duplicate UIDs or groups.Read 8 Oct 2026 · github.com
Output formats
It can display or save results in JSON and SARIF formats.Read 8 Oct 2026 · github.com
Private registry credentials
For private registry access, the documentation describes configuring credentials through environment variables and advises against using them on a local machine.Read 8 Oct 2026 · github.com
Registry integrations
Dockle documents access to private images in Docker Hub, Amazon ECR, Google Container Registry, and self-hosted registries.Read 8 Oct 2026 · github.com

Plans and prices

Dockle Free Open-source container image linter Read 8 Oct 2026 · github.com

Every Dockle plan and price →

Strong points and limits

Strong points

  • Free Apache-2.0 open-source software
  • Checks CIS Docker Image Benchmarks
  • JSON and SARIF result formats
  • GitHub Action and CI examples
  • Scans private registries and saved archives

Limits

  • Self-hosted deployment
  • Private registry credentials use environment variables
  • Focused on container image checks

Who it suits

Dockle suits teams that want to lint container images within their own environments and CI workflows. It is relevant when CIS, Docker, and Linux image checks or JSON/SARIF output are required.

Verdict

Dockle provides configurable security checks, CI integration, registry access, and portable installation without a listed price. Its self-hosted model leaves operation and credential handling to the user.

Where Specifiction places it

Alternatives to DockleAll alternatives →