# Docker socket

A workload that mounts the Docker socket or another host path, including a Compose volume for /var/run/docker.sock.

Area: Security

## What you need to supply

The manifest or Compose file text. The check does not inspect a running host.

## If it reports a finding

High severity. The suggested next step is to use a scoped volume instead of the host socket.

## What this does not prove

A socket mounted only at runtime, outside the submitted text, is outside this check.

## Volume that this check is written to notice

```
volumes:
  - /var/run/docker.sock:/var/run/docker.sock
```

Reading this page does not submit infrastructure. The HTML page is https://skaleagents.com/checks/docker-socket.