docker/skills docker-compose-patterns
Checked the catalogued skill at docker-compose-patterns.
A set by no findings on this axis
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A set by no findings on this axis
8 suppressed by AI triage
Documentation example of hardcoded secret, not an actual secret in the repo.
Illustrates use of a .env file, a benign example in documentation.
Shows a bad bind mount example in documentation, not a real path traversal.
Shows a good named volume example in documentation, not a real path traversal.
The curl command is a healthcheck to a local Elasticsearch instance, not an exfiltration or remote payload pull.
Absolute path used in a Docker Compose volume mapping; normal and harmless.
Documented example of bind mounts; no DNS exfiltration code present.
Absolute path used for a named volume in a Docker Compose file; benign configuration.