container-validator

Validate Dockerfiles and Kubernetes manifests against security and best-practice rules.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/benreceveur/claude-workflow-engine --skill container-validator
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: container-validator
Source: https://github.com/benreceveur/claude-workflow-engine/tree/main/skills/container-validator
Command: npx skills add https://github.com/benreceveur/claude-workflow-engine --skill container-validator

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python3, pyyaml, and includes scripts (resource) and examples (resource) components.

What problem does it solve?

This Skill ensures your Dockerfiles, Kubernetes manifests, and Docker Compose files adhere to best practices, security standards, and compliance requirements. It prevents misconfigurations and vulnerabilities that can lead to costly production issues and security breaches.

Core Features & Use Cases

  • Dockerfile Validation: Checks for best practices like running as a non-root user, including health checks, and optimizing image layers.
  • Kubernetes Manifest Validation: Verifies resource limits, liveness/readiness probes, and secure security contexts in K8s deployments.
  • Container Security Scanning: Identifies potential security risks, exposed secrets, and compliance violations across your container configurations.
  • Use Case: Integrate this Skill into your CI/CD pipeline to automatically scan new Dockerfiles and Kubernetes manifests, flagging critical security flaws and performance bottlenecks before deployment.

Quick Start

Validate the Dockerfile in the current directory for best practices and security issues.

Frequently Asked Questions about container-validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate Dockerfiles and Kubernetes manifests for security issues?

Container validation scans Dockerfiles and Kubernetes manifests to identify security risks, misconfigurations, and best-practice violations. It checks for non-root user execution, health checks, resource limits, liveness/readiness probes, exposed secrets, and CIS benchmark compliance before deployment.

Can I integrate container validation into my CI/CD pipeline?

Yes. Container validation works in CI/CD pipelines to automatically scan new Dockerfiles and Kubernetes manifests, flagging critical security flaws and performance bottlenecks before deployment. It integrates with image builds and production deployment workflows.

What container configuration issues does validation detect?

Container validation detects missing health checks, absent resource limits, insecure security contexts, non-root user violations, secret exposure, layer optimization problems, and Kubernetes probe configuration gaps in Dockerfiles, Kubernetes resources, and docker-compose files.

Do I need Python installed to run container validation?

Yes. Container validation requires Python 3 and PyYAML to parse and validate container configurations. These dependencies enable manifest analysis and rule-based scanning against best practices and compliance standards.

What's the best way to ensure containers meet compliance and security standards?

Automated container validation against best practices, security standards, and CIS benchmarks prevents misconfigurations and vulnerabilities in production. Validation covers Dockerfile optimization, Kubernetes resource constraints, probe configuration, and security context settings.

Can container validation work with docker-compose configurations?

Yes. Container validation scans Dockerfiles, Kubernetes manifests, and docker-compose configurations with configurable rules to identify security risks and compliance violations across your container infrastructure.