iac-audit-pack

Name: iac-audit-pack
Author: unbearabledev

该来源不提供完整文件导出（国内平台多为平台内托管），仅存元数据与原链

接入信息

传输形态: http
鉴权方式: 需 API Key（需要配置：token）
端点: https://iac-audit-pack--unbearabledev.run.tools

该服务需要凭证，请按官方文档申请后替换占位符

{
  "mcpServers": {
    "iac-audit-pack": {
      "headers": {
        "Authorization": "Bearer \u003cYOUR_KEY\u003e"
      },
      "url": "https://iac-audit-pack--unbearabledev.run.tools"
    }
  }
}

能力清单

工具	说明
audit_compose	Run the full security audit against a docker-compose.yml. Provide exactly one of compose_yaml (paste the YAML) or compose_url (public HTTPS URL). Returns 25 checks across 9 categories with severity, remediation, and YAML fix snippets.
check_privilege	Run only the compose 'privilege' checks against a docker-compose.yml.
check_network	Run only the compose 'network' checks against a docker-compose.yml.
check_filesystem	Run only the compose 'filesystem' checks against a docker-compose.yml.
check_secrets	Run only the compose 'secrets' checks against a docker-compose.yml.
check_resources	Run only the compose 'resources' checks against a docker-compose.yml.
check_image_hygiene	Run only the compose 'image_hygiene' checks against a docker-compose.yml.
check_runtime_lifecycle	Run only the compose 'runtime_lifecycle' checks against a docker-compose.yml.
check_logging	Run only the compose 'logging' checks against a docker-compose.yml.
check_compose_hygiene	Run only the compose 'compose_hygiene' checks against a docker-compose.yml.
list_checks_compose	List the full catalog of docker-compose audit checks (25 checks, 9 categories).
audit_dockerfile	Run the full security and quality audit against a Dockerfile. Provide exactly one of dockerfile_content (paste the Dockerfile) or dockerfile_url (public HTTPS URL). Returns 18 checks across 5 categories with severity, line numbers, remediation, and fix snippets.
check_base_image_dockerfile	Run only the Dockerfile 'base_image' checks against a Dockerfile.
check_instructions_dockerfile	Run only the Dockerfile 'instructions' checks against a Dockerfile.
check_security_dockerfile	Run only the Dockerfile 'security' checks against a Dockerfile.
check_efficiency_dockerfile	Run only the Dockerfile 'efficiency' checks against a Dockerfile.
check_secrets_dockerfile	Run only the Dockerfile 'secrets' checks against a Dockerfile.
list_checks_dockerfile	List the full catalog of Dockerfile audit checks (18 checks, 5 categories).
audit_github_actions	Run the full security audit against a GitHub Actions workflow file. Provide exactly one of workflow_yaml (paste the YAML) or workflow_url (public HTTPS URL to a .github/workflows/*.yml file). Returns 13 checks across 5 categories covering supply-chain, token leaks, permissions, and script injection.
check_secrets_gha	Run only the GitHub Actions 'secrets' checks against a workflow file.
check_permissions_gha	Run only the GitHub Actions 'permissions' checks against a workflow file.
check_action_pinning_gha	Run only the GitHub Actions 'action_pinning' checks against a workflow file.
check_runner_security_gha	Run only the GitHub Actions 'runner_security' checks against a workflow file.
check_workflow_config_gha	Run only the GitHub Actions 'workflow_config' checks against a workflow file.
list_checks_github_actions	List the full catalog of GitHub Actions audit checks (13 checks, 5 categories).
validate_postcode	Return settlement(s) and county for a Hungarian postcode.
lookup_postcode	Alias for validate_postcode — return settlement(s) and county for a HU postcode.
lookup_city	Return all postcodes for a Hungarian city/settlement (diacritic-insensitive).
validate_address	Validate that postcode and city are a valid Hungarian pairing.
list_postcodes_in_county	List all postcodes in a given Hungarian county (varmegye).
budapest_district_lookup	Return Budapest postcodes for a district (I-XXIII or 1-23).
audit_all	Detect file types and run the appropriate audit on each, returning a combined report. Detects: docker-compose.yml (compose audit), Dockerfile (dockerfile audit), .github/workflows/*.yml (GHA audit). Runs all applicable audits and merges findings into a single response envelope.
list_all_checks	List every check across all three audit packages (compose, dockerfile, GHA). Returns the full check catalog with source package, id, category, severity, and title. 56 checks total across 19 categories.

纠错与举报（发现条目失效、署名有误或涉及侵权？）

提交举报 / 纠错

侵权举报经核验成立后，我们会即时下线该条目并删除已存的内容副本。