{"uid":"cap_5SFmo2pfiBirEhEbV3q6D","slug":"deploy-config-risk-scanner-3ca71913","name":"Deploy Config Risk Scanner","description":"deployment configuration risk scan for YAML, Docker Compose or Kubernetes snippets: flags privileged containers, latest tags, host networking and plaintext secrets.","url":"https://relay402.georgespring.workers.dev/api/security-deploy-config-risk","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["config"],"properties":{"config":{"type":"string","maxLength":64000,"minLength":1},"filename":{"type":"string","maxLength":200}},"additionalProperties":false}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_3zgh6mMlQBgYDrff05Z8d","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans YAML, Docker Compose, or Kubernetes configuration snippets for deployment security risks including privileged containers, latest image tags, host networking, and plaintext secrets.","exampleAgentPrompt":"Can you scan this docker-compose.yml snippet for security risks and flag anything dangerous like privileged containers, host networking, plaintext secrets, or latest image tags? Here's the config: `version: '3' services: web: image: nginx:latest network_mode: host privileged: true`","exampleUseCases":[{"title":"Pre-deploy Kubernetes manifest audit","prompt":"Before I push this to production, scan my Kubernetes pod spec YAML for any security misconfigurations — especially privileged mode, hostNetwork, or hardcoded secrets. Here it is: `apiVersion: v1 kind: Pod metadata: name: myapp spec: hostNetwork: true containers: - name: app image: myapp:latest securityContext: privileged: true env: - name: DB_PASSWORD value: hunter2`"},{"title":"Docker Compose security review in CI","prompt":"I want to gate my CI pipeline on this — run a security risk scan on my docker-compose.yml and tell me if there are any dangerous settings like latest tags, privileged containers, or exposed secrets I need to fix before merging."},{"title":"Spot-check Helm chart YAML for secrets","prompt":"Can you check this Helm chart values snippet for plaintext secrets or risky deployment settings? I want to know if anything like a hardcoded API key or host networking flag is hiding in here before we release."}],"resultDescription":"Returns a list of security risk findings for the scanned configuration, each identifying the type of issue (e.g. privileged container, latest image tag, host networking enabled, plaintext secret), the relevant config key or line, and a severity or risk description. The response is structured for easy automated consumption by an agent or CI pipeline.","failureModes":["Empty or missing config query parameter returns an error","Config snippet exceeds 64,000 character limit and is rejected","Malformed or non-YAML/non-Docker/non-Kubernetes input may produce no findings or a parse error","Network timeout on the worker edge function","GET method required — other HTTP methods will fail"],"whenToPreferThis":"Use this endpoint when you need a fast, automated security scan of deployment configuration files (YAML, Docker Compose, Kubernetes manifests) before shipping or merging. It's ideal for CI/CD pipelines, pre-commit hooks, or agent workflows that need to catch common misconfigurations like privileged containers, latest image tags, host networking, or hardcoded secrets without running a full SAST tool. Prefer this over general-purpose code scanners when the input is specifically a container or Kubernetes config snippet.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T18:46:04.015Z","isFirstParty":false}