getreadystack/docker-hub-pull-limit-lint repository overview

⁠Docker Hub Pull Limit Lint

Finds every anonymous Docker Hub pull in GitHub Actions, compose, GitLab CI, Kubernetes and Dockerfiles, including the service containers your login step never covers. Docker Hub limit: 100 pulls per 6 hours per IPv4 address or IPv6 /64 subnet (docs.docker.com, checked 2026-09-27).

⁠Run

docker run --rm -v "$PWD":/work getreadystack/docker-hub-pull-limit-lint /work/file

The same 10 rules as the VS Code extension, in a container. Mount a folder on /work.

⁠Free

• Lint the open workflow, compose, GitLab CI, Kubernetes or Dockerfile and see every anonymous Docker Hub pull with line and fix, using all 10 rules.
• --rules lists every rule

⁠With a licence ($29 once)

• Scan the whole workspace in one run and export a Markdown pull inventory report to attach to the CI ticket.

docker run --rm -e READYSTACK_LICENSE=<key> -v "$PWD":/work getreadystack/docker-hub-pull-limit-lint --dir /work --ci

Docker Pro costs $9 per user per month billed yearly ($108 a year), and it only lifts the limit for pulls that log in; this lint costs $29 once.

⁠Use from an AI agent (MCP)

Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:

{ "mcpServers": { "docker-hub-pull-limit-lint": { "command": "npx", "args": ["-y", "@readystack/docker-hub-pull-limit-lint", "--mcp"] } } }

Tools: check_text and check_file (free) · check_dir (licence). The agent gets every finding with the line number.

⁠Use in CI

- name: Docker Hub Pull Limit Lint
  run: npx -y @readystack/docker-hub-pull-limit-lint --dir . --ci

(container: docker run --rm -v "$PWD:/work" getreadystack/docker-hub-pull-limit-lint --dir /work --ci)

The folder sweep, reports and CI mode need one licence — one payment, no subscription. Set READYSTACK_LICENSE=<key> or run --license <key> once.

Get a licence⁠