Packages / openSUSE Tumbleweed / Productivity/Networking/Security / docker-bench-security

Package: docker-bench-security (1.6.1-1.4)

Docker Bench for Security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and implement the CIS Docker Benchmark.

Other Packages Related to docker-bench-security:

dep: /bin/bash
Package not available
dep: [audit]
User Space Tools for Kernel Auditing
dep: [coreutils]
GNU Core Utilities
dep: [docker] (>= 1.13.0)
The Moby-project Linux container runtime
dep: [findutils]
The GNU versions of find utilities (find and xargs)
dep: [gawk]
Domain-specific language for text processing
dep: [grep]
Print lines matching a pattern
dep: [net-tools]
Important Programs for Networking
dep: [net-tools-deprecated]
Deprecated Networking Utilities
dep: [sed]
A Stream-Oriented Non-Interactive Text Editor

Download docker-bench-security

Architecture	Package size	Installed size	Files	Package
noarch	41 KiB	178 KiB	list of files	Download

Package file paths (20)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/bin/docker-bench-security
/usr/libexec/docker-bench-security
/usr/libexec/docker-bench-security/functions
/usr/libexec/docker-bench-security/functions/functions_lib.sh
/usr/libexec/docker-bench-security/functions/helper_lib.sh
/usr/libexec/docker-bench-security/functions/output_lib.sh
/usr/libexec/docker-bench-security/tests
/usr/libexec/docker-bench-security/tests/1_host_configuration.sh
/usr/libexec/docker-bench-security/tests/2_docker_daemon_configuration.sh
/usr/libexec/docker-bench-security/tests/3_docker_daemon_configuration_files.sh
/usr/libexec/docker-bench-security/tests/4_container_images.sh
/usr/libexec/docker-bench-security/tests/5_container_runtime.sh
/usr/libexec/docker-bench-security/tests/6_docker_security_operations.sh
/usr/libexec/docker-bench-security/tests/7_docker_swarm_configuration.sh
/usr/libexec/docker-bench-security/tests/8_docker_enterprise_configuration.sh
/usr/libexec/docker-bench-security/tests/99_community_checks.sh
/usr/share/doc/packages/docker-bench-security
/usr/share/doc/packages/docker-bench-security/README.md
/usr/share/licenses/docker-bench-security
/usr/share/licenses/docker-bench-security/LICENSE.md

Field source: openSUSE Tumbleweed OSS

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try openSUSE Tumbleweed in the browser Build an image that includes docker-bench-security

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1.6.1-1.4	tumbleweed / oss	noarch	openSUSE Tumbleweed · OSS · multi-architecture	41 KiB	178 KiB	noarch/docker-bench-security-1.6.1-1.4.noarch.rpm

Field source: openSUSE Tumbleweed OSS

Known vulnerabilities

No matching advisories in the tracked sources.

Last synced: Oct 31, 2026, 8:16:09 AM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.6.1-1.4 / noarchObserved Sep 1, 2026sha512 7303f2832a00…fa47b9eaSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 7303f2832a001679c0412cc18fe7fe3a085eddbc85845a80f43c1278f9caab9f0c5c89172575b2e071810d27cddccc60c4c81f20e8281be423b7a9b9fa47b9ea

Field source: openSUSE Tumbleweed OSS

Sources

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable