Dockle vs kube-bench

Dockle is a free, self-hosted container image linter focused on security and Docker best practices. It scans images for vulnerabilities and checks settings against CIS Docker Image Benchmarks, along with Docker- and Linux-specific issues such as empty passwords and duplicate user or group IDs. Results can be displayed or saved in JSON and SARIF formats. Users can set an exit level and ignore selected checkpoints through command options, environment variables, or a .dockleignore file. The project documents continuous-integration use and provides a GitHub Action, with examples for Travis CI, CircleCI, and GitLab CI. Dockle can access private images in Docker Hub, Amazon ECR, Google Container Registry, and self-hosted registries. It can also scan an image archive created with docker save by using the --input option. Installation routes include Homebrew, Linux distribution packages, Windows binaries, version managers, source builds, and Docker. Dockle runs on Linux, macOS, and Windows and is listed under the Apache-2.0 license.

kube-bench has no write-up on Specifiction yet; its figures are above.