v0.1.0

Changelog

• bbc76ab docs: add Dockerfile, GoReleaser config, and README
• a3833a4 docs: add MIT license
• 59742f5 docs: remove Docker install option from README
• b996eba docs: restructure README, add CI/release workflows, move scan skill
• ddea974 feat: add CLI entry point with flag parsing and orchestration
• 7c75ba5 feat: add capabilities rules (privileged-mode, no-cap-drop, no-new-privileges)
• 1859ba0 feat: add compose model and YAML parser with environment normalization
• a937677 feat: add hardener for applying fixes and writing hardened compose files
• 3c7a480 feat: add health rules (no-healthcheck, restart-no-health)
• 1ed6770 feat: add image catalog with profiles for 23 common Docker images
• a645a3e feat: add network rules (exposed-ports, default-network)
• f8942d0 feat: add plaintext-secrets rule with env var pattern detection
• 2af1ccb feat: add resource rules (no-memory-limit, no-cpu-limit)
• ccc698a feat: add rule engine with Rule interface, Finding, Fix types, and registry
• a594177 feat: add skill for interactive compose security scanning
• 6f6194a feat: add terminal report with emoji/color and JSON output
• c82a0a7 feat: add user rules (running-as-root, no-read-only)
• 05533d4 feat: initialize dockguard project skeleton
• 72a50a3 feat: restore Docker image build with Docker Hub auth
• 240a086 feat: support flags after positional args, add secure test fixture
• 6740b2a fix: handle string healthcheck.test and map-form service networks
• 491d43c fix: remove docker publish from goreleaser (no Docker Hub creds)
• fcf77e0 fix: use pre-built binary in Dockerfile for GoReleaser