Docker Hub Pull Limit Lint

Runs the same checker as our npm package on a Node.js runtime that pip installs for you (nodejs-wheel-binaries) - no system Node.js needed. Your files are checked locally.

Finds every anonymous Docker Hub pull in GitHub Actions, compose, GitLab CI, Kubernetes and Dockerfiles, including the service containers your login step never covers. Docker Hub limit: 100 pulls per 6 hours per IPv4 address or IPv6 /64 subnet (docs.docker.com, checked 2026-09-27).

Install

docker-hub-pull-limit-lint file

Node 18+. The same 10 rules as the VS Code extension, from a terminal or CI.

Free

• Lint the open workflow, compose, GitLab CI, Kubernetes or Dockerfile and see every anonymous Docker Hub pull with line and fix, using all 10 rules.
• --rules lists every rule

With a licence ($29 once)

• Scan the whole workspace in one run and export a Markdown pull inventory report to attach to the CI ticket.

docker-hub-pull-limit-lint --dir ./templates --report html --out report.html

Docker Pro costs $9 per user per month billed yearly ($108 a year), and it only lifts the limit for pulls that log in; this lint costs $29 once.

Use from an AI agent (MCP)

Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:

{ "mcpServers": { "docker-hub-pull-limit-lint": { "command": "docker-hub-pull-limit-lint", "args": ["--mcp"] } } }

Tools: check_text and check_file (free) · check_dir (licence). The agent gets every finding with the line number.

Use in CI

- name: Docker Hub Pull Limit Lint
  run: pip install rulestamp-docker-hub-pull-limit-lint && docker-hub-pull-limit-lint --dir . --ci

The folder sweep, reports and CI mode need one licence — one payment, no subscription. Set READYSTACK_LICENSE=<key> or run --license <key> once.

Get a licence

Install (PyPI)

pip install rulestamp-docker-hub-pull-limit-lint
docker-hub-pull-limit-lint --help