Config Scanners & Security Linters

Paste & Scan Tools

Paste your config files and get instant health reports. Dependency audits, deprecation checks, security linting, and version freshness scores. Every tool runs 100% client-side — your code never leaves the browser.

No data leaves your browser 11 tools
❤️🩹

Tech Stack Health Scorecard

Select your technologies and get an instant A-F health grade with live badges showing version status, EOL dates, and CVE counts.

Try it free
📦

Dependency EOL Scanner

Paste package.json, requirements.txt, go.mod, Gemfile, Cargo.toml, or pom.xml to scan for end-of-life dependencies and known vulnerabilities.

Try it free
☸️

K8s Deprecation Checker

Paste Kubernetes YAML manifests to find deprecated and removed APIs before upgrading. Supports K8s 1.25 through 1.35 with 35+ deprecation rules.

Try it free
🐳

Dockerfile Security Linter

Paste a Dockerfile and get a 16-rule security and best practices audit. Catches running as root, using :latest tags, missing health checks, and more.

Try it free

GitHub Actions Auditor

Paste a workflow YAML to check action versions, SHA pinning, and deprecated actions. Flags unpinned versions and outdated actions with 0-100 scoring.

Try it free
📋

SBOM Health Analyzer

Upload a CycloneDX or SPDX JSON SBOM file to get end-of-life and CVE status for every component with an overall health grade.

Try it free
🏗️

Terraform Provider Checker

Paste .terraform.lock.hcl to audit provider versions and find outdated dependencies. Links directly to Terraform Registry.

Try it free
🐹

Go Module Health Check

Paste go.mod to check Go version support, dependency health, and archived modules like gorilla/mux. Flags indirect dependencies.

Try it free

Helm Chart Checker

Paste Chart.yaml to check Kubernetes version compatibility, apiVersion, dependencies, and maintainer best practices.

Try it free
🐙

Docker Compose Checker

Paste docker-compose.yml to audit service images, detect :latest tags, find outdated versions, and check for health configuration.

Try it free
🔑

.env Security Scanner

Paste a .env file to detect exposed credentials, API keys, and security risks by analysing key names. Values are never stored or transmitted.

Try it free

Explore Other Categories

🔔 Get free alerts when your tech stack hits EOL or gets a CVE Set Up Alerts

</> Embed Config Scanners & Security Linters

Copy this iframe snippet to embed this tool on your website. The tool runs client-side and includes a "Powered by ReleaseRun" attribution.

Preview: Open embed view