container-audit

Dockerfile security auditing detects misconfigurations in base-image choices, privileges, and secrets using static analysis and optional live-mode checks. It generates a structured risk register with actionable remediation guidance to accelerate security reviews.

Checking docker-compose configurations for compliance issues involves scanning for security risks and reliability flaws. This skill applies a fixed audit taxonomy and uses per-file sub-agents to produce consolidated reports across multiple containers.

Yes, you can audit multiple Docker containers simultaneously. The skill supports per-Dockerfile sub-agents and generates a centralized risk register to consolidate findings across all scanned container configurations.

Yes, Docker container auditing checks for missing healthchecks and layer efficiency. It statically analyzes Dockerfiles and docker-compose files to surface these issues alongside base-image choices, privileges, and embedded secrets.

Static Dockerfile analysis detects configuration flaws without running the container, while optional live-mode checks provide deeper runtime validation. Both methods apply a fixed audit taxonomy to identify security, reliability, and efficiency issues.

A risk register is needed for Docker container security reviews to systematically track detected misconfigurations and provide actionable remediation guidance. This structured output accelerates the resolution of base-image, privilege, and secret exposure issues.