container-scanning

Scan container images for vulnerabilities and misconfigurations using Trivy and Grype.

46|4|Updated Jan 27, 2026

Search Tags:#ci/cd #kubernetes #docker #container security #vulnerability scanning #trivy #grype

Ready to run

npx skills add https://github.com/BagelHole/DevOps-Security-Agent-Skills --skill container-scanning

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: container-scanning
Source: https://github.com/BagelHole/DevOps-Security-Agent-Skills/tree/main/security/scanning/container-scanning
Command: npx skills add https://github.com/BagelHole/DevOps-Security-Agent-Skills --skill container-scanning

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of identifying vulnerabilities and security misconfigurations within container images, ensuring the security posture of containerized applications.

Core Features & Use Cases

Vulnerability Scanning: Detects known vulnerabilities in operating system packages and application dependencies.
Configuration Auditing: Identifies security misconfigurations in Dockerfiles, Kubernetes manifests, and IaC files.
Compliance Checks: Helps meet compliance requirements by identifying critical and high-severity issues.
Use Case: Integrate this skill into your CI/CD pipeline to automatically scan every new container image for critical vulnerabilities before deployment, preventing insecure code from reaching production.

Quick Start

Use the container-scanning skill to scan the local Docker image 'myapp:latest' for critical vulnerabilities and output the results in JSON format.

Frequently Asked Questions about container-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Docker images for vulnerabilities in a CI/CD pipeline?▼

You can scan Docker images for vulnerabilities by integrating this Skill into your CI/CD pipeline to automatically detect critical issues in OS packages and application dependencies before deployment.

What is container image vulnerability scanning and how does it work?▼

Container image vulnerability scanning identifies known security flaws and misconfigurations within Docker images. It works by analyzing operating system packages and application dependencies against vulnerability databases using tools like Trivy and Grype.

Does this container security scanning work with Kubernetes manifests and Dockerfiles?▼

Yes, container security scanning works with Kubernetes manifests and Dockerfiles. It performs configuration auditing to identify security misconfigurations in your infrastructure as code files alongside image vulnerability detection.

Can I output vulnerability scanning results in JSON format for compliance checks?▼

Yes, you can output vulnerability scanning results in JSON format to support compliance checks. This helps meet compliance requirements by identifying and documenting critical and high-severity security issues found in container images.

What container runtimes or scanning tools do I need to detect image vulnerabilities?▼

To detect image vulnerabilities effectively, you need container runtimes and specific scanning tool installations like Trivy or Grype. These tools are required for the Skill to execute vulnerability detection and reporting.