skills.rest
naporin0624
naporin0624COMMUNITY
Explore all skills by this author →
Website𝕏@naporin24690GitHub

container-scanner

Lint Dockerfiles with Hadolint and scan container images with Trivy.

3|1|Updated Dec 23, 2025
Search Tags:#ci/cd#security#docker#trivy#hadolint#container-scanner
One-click install
npx skills add https://github.com/naporin0624/claude-web-audit-plugins --skill container-scanner
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: container-scanner
Source: https://github.com/naporin0624/claude-web-audit-plugins/tree/main/skills/container-scanner
Command: npx skills add https://github.com/naporin0624/claude-web-audit-plugins --skill container-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a unified wrapper around Hadolint and Trivy to quickly lint Dockerfiles and scan container images for security issues, reducing risk and speeding up secure CI/CD workflows.

Core Features & Use Cases

  • Dockerfile linting with Hadolint to catch common pitfalls early.
  • Container image scanning with Trivy to identify vulnerabilities.
  • JSON outputs & quick-start use to integrate into CI pipelines or quick local checks.

Quick Start

  • Lint Dockerfile: npx container-scanner lint Dockerfile
  • Scan image: npx container-scanner image nginx:latest
  • Both with JSON: npx container-scanner lint Dockerfile --json

Frequently Asked Questions about container-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Docker images for security vulnerabilities?▼

Use Trivy to scan container images for vulnerabilities. This Skill wraps Trivy to identify security issues in your images and output results in JSON format for CI/CD integration or local analysis.

What's the best way to lint Dockerfiles for best practices?▼

Hadolint lints Dockerfiles to catch common pitfalls and enforce best practices early. This Skill automates Hadolint execution and normalizes output into a consistent schema for quick local checks or pipeline integration.

Can I automate Dockerfile and container image scanning in CI/CD pipelines?▼

Yes. This Skill provides unified commands to lint Dockerfiles and scan images, outputting structured JSON results that integrate directly into CI/CD workflows to reduce security risk.

Do I need separate tools to check both Dockerfiles and container images?▼

No. This Skill combines Hadolint for Dockerfile linting and Trivy for image scanning into one unified wrapper, reducing setup complexity while covering both security scanning needs.

How do I get JSON output from Docker security scans?▼

Pass the --json flag when running lint or image commands. This Skill normalizes Hadolint and Trivy findings into consistent JSON with tool, version, scanDate, findings, and summary fields.

Related Skills

Explore More Software Engineering Skills→
AI-Strategy-LLCAI-Strategy-LLC

Container App Deploy

Build and push container images to registries with preflight validation and vulnerability scanning.

Official
Intermediate
dnvitidnviti
10

vulnerability-report

Generate a security report from vulnerability scan findings with remediation steps.

Community
Intermediate
alirezarezvanialirezarezvani
24.2k

senior-secops

Automate security scanning, vulnerability assessment, and compliance checks with Python scripts.

Community
Intermediate
altrupetsaltrupets

Security & Compliance Automation

Automate security and compliance checks for cloud-native environments using OPA, Trivy, and CIS benchmarks.

Official
Advanced