skills.rest
rauly-1408
rauly-1408COMMUNITY
Explore all skills by this author →
GitHub

container-scanner

Scan Dockerfiles and container images for security vulnerabilities and configuration issues.

Updated Jan 19, 2026
Search Tags:#security#docker#container#vulnerability scanning#trivy#hadolint
One-click install
npx skills add https://github.com/rauly-1408/order-saas --skill container-scanner-rauly-1408
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: container-scanner
Source: https://github.com/rauly-1408/order-saas/tree/main/.claude/skills/container-scanner
Command: npx skills add https://github.com/rauly-1408/order-saas --skill container-scanner-rauly-1408

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers identify security risks in Dockerfiles and container images by automating linting and vulnerability scanning instead of relying on manual reviews.

Core Features & Use Cases

  • Dockerfile Security Linting: Runs Hadolint checks to detect Dockerfile best practice violations and configuration issues.
  • Container Image Scanning: Uses Trivy to find known vulnerabilities in container images and report severity details.
  • Use Case: A development team can scan a new application image before deployment to catch vulnerable packages and insecure Dockerfile patterns.

Quick Start

Use the container-scanner skill to scan my Dockerfile for security issues and provide a detailed report.

Frequently Asked Questions about container-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a Dockerfile for security issues and configuration violations?▼

Scanning a Dockerfile for security issues involves running Hadolint checks to detect best practice violations and configuration issues, yielding a detailed report of insecure patterns.

What is the best way to find vulnerabilities in Docker container images?▼

The best way to find vulnerabilities in Docker container images uses Trivy to detect known security flaws and reports severity details for vulnerable packages.

Do I need Hadolint and Trivy installed to automate container vulnerability scanning?▼

Yes, you need Hadolint and Trivy installed because the Skill requires these specific tools to perform deterministic linting and vulnerability detection tasks on Docker builds.

Can I use Docker image scanning to catch vulnerable packages before deployment?▼

Yes, you can use Docker image scanning to catch vulnerable packages before deployment by running Trivy to validate the application image and report configuration issues.

Does container security linting detect Dockerfile best practice violations automatically?▼

Container security linting detects Dockerfile best practice violations automatically by running Hadolint checks, replacing the need for manual security reviews of Docker builds.

Related Skills

Explore More Software Engineering Skills→
penghang1223penghang1223
1

docker-security

Audit Docker containers for secure build, runtime, and supply-chain integrity.

Community
Advanced
thechandanbhagatthechandanbhagat
8

docker

Generate Dockerfiles and Docker Compose configurations with optimization guidance.

Community
Advanced
ThejanaJayalathThejanaJayalath

quarkus-verification

Automate Quarkus build, static analysis, test coverage, security scanning, and native compilation.

Community
Advanced
devendrapratapsinghdevendrapratapsingh
1

platform-security

Audit container images, Kubernetes configurations, cloud environments, and infrastructure as code for security vulnerabilities.

Community
Advanced