docker/docker-bench-security
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
License & maintenance
Apache-2.0 is a permissive license: free to use commercially with attribution.
Last code push 4 months ago.