Iac Audit Pack

general MCP Server

Bundle audit MCP for IaC: docker-compose + Dockerfile + GitHub Actions + HU postcode under one endpoint. Pay-per-event via Apify Actor Store.

Verified
generalgeneraldocker
3 views0 stars0 forks

Why This Matters

Discovered via github-topic:mcp and last synced 3mo ago.

Verified
Source
github-topic:mcp
Stars
0
Last synced
3mo ago
Install
Check source

Install

Install instructions not detected yet

Check the source repository for the latest setup steps.

View source instructions
28
Tools
0
Resources
0
Prompts
Standard I/O
Transport

Available Tools (28)

check_supply_chain_advanced_gha

TeamPCP-class supply-chain patterns (GHA-201..208)

19

5

Event

USD

21

6

25

9

18

5

check_image_hygiene

Unpinned tags, `latest` usage

check_runtime_lifecycle

Restart policies, healthchecks

check_secrets_gha

Leaked tokens, secret in run: blocks

Package

Checks

check_resources

Missing memory/CPU limits

check_secrets_dockerfile

Hardcoded secrets in RUN/ENV/ARG

check_base_image_dockerfile

Unpinned base, `latest`, root user in FROM

check_workflow_config_gha

pull_request_target misuse, script injection

13

5

check_logging

Logging driver config

check_permissions_gha

Overly broad write-all permissions

check_network

Host networking, exposed dangerous ports

Tool

Description

check_compose_hygiene

Version field, service naming

check_action_pinning_gha

Unpinned action refs (not SHA-pinned)

check_runner_security_gha

Self-hosted runner risks

check_secrets

Hardcoded passwords, tokens in env vars

check_security_dockerfile

USER root, privilege escalation patterns

check_filesystem

Docker socket mounts, host path mounts

check_efficiency_dockerfile

Layer count, cache busting

check_privilege

Privileged mode, cap_add, user namespace

check_instructions_dockerfile

ADD vs COPY, COPY ordering, ENV secrets