AI导哈

Docker Scout 容器安全 MCP 服务

eagle-scout 是一款 MCP 服务，将 AI 助手与 Docker Scout 连接，用户可以用自然语言请求容器镜像漏洞扫描、SBOM 生成、策略评估和供应链安全分析，适用于开发者不离开 AI 工作流即可完成镜像安全分析。

  • by ry-ops
  • Go
  • 本地部署
  • 1 星标
  • 更新于
在 GitHub 查看 ry-ops/eagle-scout

使用说明

🦅 eagle-scout

Docker Scout container security, over MCP. A Go MCP server that bridges AI assistants and Docker Scout — ask in plain language, and it runs the scan and returns structured results.

What it does

eagle-scout turns natural-language requests into Docker Scout commands and returns structured results — CVEs by severity, SBOMs, image diffs, policy verdicts and supply-chain artifacts — all without leaving your AI assistant.

The 14 tools

Group Tools
Scan & analyze scout_cves, scout_quickview, scout_compare, scout_recommendations
Supply chain scout_sbom (SPDX/CycloneDX), scout_attestation, scout_vex, scout_policy
Operate scout_repo, scout_environment, scout_cache, scout_enroll, scout_watch, scout_version

Quick start

Prerequisites: Docker with the Scout CLI plugin, and a logged-in Docker account for registry-backed features.

docker run --rm -i \
  -v /var/run/docker.sock:/var/run/docker.sock \
  ryops/eagle-scout:latest

Or build from source (Go 1.25):

git clone https://github.com/ry-ops/eagle-scout.git
cd eagle-scout
go build ./cmd/eagle-scout

Connect Claude Desktop — add to claude_desktop_config.json:

{
  "mcpServers": {
    "eagle-scout": {
      "command": "docker",
      "args": ["run", "--rm", "-i", "-v", "/var/run/docker.sock:/var/run/docker.sock", "ryops/eagle-scout:latest"]
    }
  }
}

Then ask: "Scan nginx:latest for critical CVEs," "Generate an SBOM for my-app:1.2," or "Compare my-app:1.1 and my-app:1.2."

More

A Docker Desktop extension, CI/release workflows and security policy live in the repo; see CHANGELOG.md and CONTRIBUTING.md. Part of the ry-ops fabric ecosystem.

License

MIT. See LICENSE.

Part of ry-ops · building the pipes between infrastructure, automation, and observability · built by ry-ops

相关 MCP