https://cybertoolchain.io/tools/docksec New releases and features in DockSec, tracked by The Cyber Toolchain. en Sun, 20 Sep 2026 19:21:32 GMT https://github.com/OWASP/DockSec/releases/tag/v2026.9.21 https://github.com/OWASP/DockSec/releases/tag/v2026.9.21 Sun, 20 Sep 2026 19:21:32 GMT DockSec v2026.9.21 adds --fix, AI exploit-chain correlation, EPSS prioritization, Markdown CI reports, and PR comment mode.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--fix` flag that emits remediation commands alongside each finding.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--format markdown` report output, sized for CI/CD pipeline logs and pull-request summaries. • Adds EPSS-based priority scoring to structured findings output, surfacing exploitability likelihood alongside severity. • Adds AI-driven finding correlation and exploit-chain analysis to group related issues into attack paths. • Adds PR comment mode that posts scan results directly as a pull-request comment. • Publishes the container image to GHCR, providing a new distribution channel alongside the existing packaging. • Adds signed releases for supply-chain verification of DockSec artifacts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/docksec https://github.com/OWASP/DockSec/releases/tag/v2026.9.20 https://github.com/OWASP/DockSec/releases/tag/v2026.9.20 Sun, 20 Sep 2026 07:23:00 GMT DockSec: Adds AI-powered vulnerability correlation that identifies exploit chains across findings. • Replaces string-substitution HTML templates with Jinja2 for report rendering. • Adds signed releases and self-scanning CI with integration guides. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/docksec https://github.com/OWASP/DockSec/releases/tag/v2026.9.20rc3 https://github.com/OWASP/DockSec/releases/tag/v2026.9.20rc3 Sun, 20 Sep 2026 07:09:38 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/docksec https://github.com/OWASP/DockSec/releases/tag/v2026.9.20rc2 https://github.com/OWASP/DockSec/releases/tag/v2026.9.20rc2 Sun, 20 Sep 2026 06:54:36 GMT DockSec: Introduces EPSS-based priority scoring so findings are ranked by real-world exploit probability rather than raw severity volume. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/docksec https://github.com/OWASP/DockSec/releases/tag/v2026.9.20rc1 https://github.com/OWASP/DockSec/releases/tag/v2026.9.20rc1 Sun, 20 Sep 2026 06:45:04 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/docksec https://github.com/OWASP/DockSec/releases/tag/v2026.6.12 https://github.com/OWASP/DockSec/releases/tag/v2026.6.12 Fri, 12 Jun 2026 09:25:28 GMT DockSec v2026.6.12 adds GitHub Action support for Docker Compose files • Adds `docker compose` file scanning capability within the GitHub Action Full history on Cyber Toolchain: https://cybertoolchain.io/tools/docksec https://github.com/OWASP/DockSec/releases/tag/v2026.6.11 https://github.com/OWASP/DockSec/releases/tag/v2026.6.11 Fri, 12 Jun 2026 09:06:54 GMT DockSec v2026.6.11 adds Docker Compose security scanning and multi-service orchestration support. • Adds `docker compose` security scanning and multi-service orchestration support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/docksec https://github.com/OWASP/DockSec/releases/tag/v2026.5.22.1 https://github.com/OWASP/DockSec/releases/tag/v2026.5.22.1 Fri, 22 May 2026 06:00:40 GMT DockSec v2026.5.22.1 adds Smart Model Selection and refines scan_only behavior • `--smart-model-selection` enables automatic selection of cost-effective models like `claude-haiku-4-5` across providers. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/docksec https://github.com/OWASP/DockSec/releases/tag/v2026.5.22 https://github.com/OWASP/DockSec/releases/tag/v2026.5.22 Fri, 22 May 2026 05:01:13 GMT DockSec v2026.5.22 adds centralized reporting and Dockerfile-only scan mode • Adds default `~/.docksec/results/` directory for organized scan reports • Enables high-speed static analysis with the enhanced `--scan-only` mode on Dockerfiles Full history on Cyber Toolchain: https://cybertoolchain.io/tools/docksec https://github.com/OWASP/DockSec/releases/tag/v2026.4.2 https://github.com/OWASP/DockSec/releases/tag/v2026.4.2 Thu, 02 Apr 2026 08:06:04 GMT DockSec v2026.4.2 replaces hardcoded config scores with real Dockerfile analysis • Replaces hardcoded configuration score with actual Dockerfile analysis Full history on Cyber Toolchain: https://cybertoolchain.io/tools/docksec https://github.com/OWASP/DockSec/releases/tag/v2026.2.23 https://github.com/OWASP/DockSec/releases/tag/v2026.2.23 Mon, 23 Feb 2026 07:47:08 GMT DockSec v2026.2.23 adds multi-LLM provider support including OpenAI, Anthropic, Google, and Ollama • Add multi-LLM provider support (OpenAI, Anthropic, Google, Ollama) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/docksec