
Conmachi: A Golang Tool for Container Security Assessment
Conmachi is a tool developed in Golang that gathers information about a container environment and identifies potential security issues.
It can be statically compiled and run without dependencies
It can be statically compiled and executed without any dependencies. This process involves checking for disabled process and user namespacing, identifying dangerous capabilities, ensuring Seccomp/AppArmor profiles are disabled, and verifying devices that are mounted from the host.