FastAPI Kubernetes Deployment
Audited by Socket on Feb 27, 2026
1 alert found:
MalwareThis repository is a deployment skill that provides Docker, docker-compose, Kubernetes manifests, Helm values, and health check code for deploying a FastAPI app. I found no indicators of active malware or covert data-exfiltration. The primary security concerns are typical operational risks: example credentials in docker-compose (Keycloak admin/admin), reliance on external container images (supply-chain risk if images are untrusted or placeholders are used as-is), and potential misuse if example placeholders (registry.example.com, api.example.com) are left unchanged. The Dockerfile HEALTHCHECK uses httpx inline which may fail if httpx is not present. Overall the artifacts are coherent with their stated purpose and seem benign for development use, but should be hardened (remove hardcoded credentials, use proper secrets management, verify image provenance) before production deployment.