The Best Container Static Analysis Tools (Linters/Formatters)
We rank 24 Container linters, code analyzers, formatters, and more. Find and compare tools like Mega-Linter, ThreatMapper, DeepSource, and more. Please rate and review tools that you've used. This helps others find the best tools for their projects.
10 Container Tools
Haskell Dockerfile Linter
A smarter Dockerfile linter that helps you build best practice Docker images.
Discover, analyze, and certify container images. A service that analyzes Docker images and applies user-defined acceptance policies to allow automated container image validation and certification
Vulnerability Static Analysis for Containers.
Run arbitrary scripts inside containers, and gather useful information.
Perform static analysis of known vulnerabilities in docker images/containers.
Docker Label Inspector
Lint and validate Dockerfile labels.
Suite of automated audit tools to examine the configuration and known vulnerabilities following the NIST-certified Security Content Automation Protocol (SCAP).
A secure DevOps platform for cloud and container forensics. Built on an open source stack, Sysdig provides Docker image scanning and created Falco, the open standard for runtime threat detection for containers, Kubernetes and cloud.
Agent-less Linux vulnerability scanner based on information from NVD, OVAL, etc. It has some container image support, although is not a container specific tool.
Analyzes resource usage and performance characteristics of running containers.
14 Multi-Language Tools
Mega-Linter can handle any type of project thanks to its 70+ embedded Linters, its advanced reporting, runnable on any CI system or locally, with assisted installation and configuration, able to apply formatting and fixes
Vulnerability Scanner and Risk Evaluation for containers, serverless and hosts at runtime. ThreatMapper generates runtime BOMs from dependencies and operating system packages, matches against multiple threat feeds, scans for unprotected secrets, and scores issues based on severity and risk-of-exploit.
In-depth static analysis to find issues in verticals of bug risks, security, anti-patterns, performance, documentation and style. Native integrations with GitHub, GitLab and Bitbucket. Less than 5% false positives.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations in your infrastructure-as-code. Supports Terraform, Kubernetes, Docker, AWS CloudFormation and Ansible
Commercial Static Code Analysis system doesn't require building the source code or pre-compilation.
A Simple and Comprehensive Vulnerability Scanner for Containers and other Artifacts, Suitable for CI. Trivy detects vulnerabilities of OS packages (Alpine, RHEL, CentOS, etc.) and application dependencies (Bundler, Composer, npm, yarn, etc.). Checks containers and filesystems.
Automated code analysis tool to deal with technical depth. Integrates with Bitbucket and Gitlab. (free for Open Source Projects)
Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its definition.
Qualys Container Security
Container native application protection to provide visibility and control of containerized applications.
Combination of multiple linters to install as a GitHub Action.
Automated Code Analysis for repos on GitHub or BitBucket.
Scan is a free open-source DevSecOps platform for detecting security issues in source code and dependencies. It supports a broad range of languages and CI/CD pipelines.
Help make this list better
Frequently Asked Questions
What are Container tools?
Linux containers are a way to run isolated Linux systems (containers) on a single Linux server. Containers are very lightweight and fast because they share the kernel of the host system. Each container can have its own users, file systems, applications, and configuration files.
What are the best Container static analysis tools and linters?
The most popular Container tools ranked by user votes are: Mega-Linter, ThreatMapper, DeepSource, Codeac, Haskell Dockerfile Linter.
Which Container tools are free to use?
Tools with a free plan include DeepSource. On top of that, there are also a number of open source like Mega-Linter, ThreatMapper, Haskell Dockerfile Linter, kics, trivy, anchore, clair, collector, dagda, Docker Label Inspector.