container-scanning

You can scan Docker images for vulnerabilities using tools like Trivy or Grype to assess base images and OS packages. This skill identifies security issues and misconfigurations in container images, producing machine-readable output to block deployments in CI.

Yes, you can enforce CI/CD security gates by defining severity thresholds such as blocking CRITICAL and warning HIGH issues. This skill applies policy enforcement to stop vulnerable container images from shipping through your automated workflows.

Yes, container scanning works with Kubernetes workloads and Dockerfiles. It identifies risky security misconfigurations in both container images and related infrastructure as code, ensuring your cloud-native deployments are hardened against breaches.

The best way to generate SARIF or JSON output for automated vulnerability enforcement is using configurable scanners like Trivy and Grype. This skill produces CI-friendly formats that integrate directly into security gates for compliance hardening.

Yes, you can use Docker Scout or cloud-native registry scanning for compliance hardening. This skill leverages provider tooling to integrate checks into your existing container registry platform and enforce security policies across workloads.