drydock.codeswhat.comWUD vs Drydock
Drydock is a fork of What's Up Docker (WUD) that has evolved significantly — migrating to TypeScript, adding security scanning, distributed agents, audit logging, rollback, and 10 additional registry providers.
Feature Comparison
A side-by-side look at what each tool offers.
| Feature | WUD | Drydock |
|---|---|---|
| Project status | Actively maintained | Actively maintained |
| Language | JavaScript | TypeScript (full ESM) |
| Web UI | Yes | Yes (redesigned) |
| Auto-update containers | Yes | Yes |
| Docker Compose updates | Yes | Yes, with multi-network support |
| Registry providers | 13 | 23 |
| Notifications | 16 triggers | 20 native trigger integrations |
| Security scanning | None | Trivy + SBOM + cosign verification |
| OIDC authentication | OIDC supported | Authelia, Auth0, Authentik |
| REST API | Yes | Yes (expanded) |
| Prometheus metrics | Yes | Yes + Grafana dashboard template |
| MQTT / Home Assistant | Yes | Yes |
| Image backup & rollback | None | Pre-update backup with retention + auto rollback |
| Container grouping | Yes | Yes (enhanced with batch actions) |
| Lifecycle hooks | None | Pre/post-update shell commands |
| Webhook API | None | Token-authenticated webhooks for CI/CD |
| Container actions | None | Start/stop/restart from UI/API |
| Distributed agents | None | SSE-based agent architecture |
| Audit log | None | Yes, with REST API & Prometheus counter |
| Semver-aware updates | Yes | Yes |
| Container log viewer | None | Yes, with level filtering & auto-fetch |
| Test framework | Jest | Vitest 4 |
| License | MIT | AGPL-3.0 |
Key Differentiators
Where Drydock goes beyond what WUD offers.
Fork & Evolve
Drydock started as a WUD fork, then migrated to TypeScript, added security scanning, distributed agents, audit logging, and dozens of new features. It's WUD's foundation taken much further.
Security Scanning
Trivy vulnerability scanning, SBOM generation (CycloneDX & SPDX), cosign signature verification, and 🥊 Update Bouncer to block vulnerable deploys. WUD has no security scanning.
Distributed Agents
Monitor remote Docker hosts via lightweight SSE-based agents with a centralized dashboard. WUD only monitors the local Docker socket.
23 Registry Providers
10 more registries than WUD — including GAR, Harbor, Artifactory, Nexus, Alibaba Cloud, IBM Cloud, and Oracle Cloud.
Rollback & Backup
Pre-update image backups with configurable retention, dry-run preview, and automatic rollback on health check failure. None of these exist in WUD.
4 More Trigger Services
Google Chat, Matrix, Mattermost, and Microsoft Teams (Adaptive Cards) plus enhanced configuration for existing triggers.
Coming from WUD?
Drydock is a direct WUD fork, so migration is straightforward. Your existing Docker socket mount works as-is. You'll get the same monitoring capabilities plus security scanning, agents, audit log, and a modernized UI.
$ docker run -d \
--name drydock \
-v /var/run/docker.sock:/var/run/docker.sock \
-p 3000:3000 \
codeswhat/drydockReady to try Drydock?
Open source, AGPL-3.0 licensed, and actively maintained.