devops-infrastructure

Dockerfile optimization reduces image size and improves security through multi-stage builds, non-root user execution, and layer caching. This Skill analyzes your Dockerfile and recommends production-ready improvements including smaller base images, consolidated RUN commands, and vulnerability remediation.

Yes. This Skill reviews CI/CD pipelines (GitHub Actions, similar workflows) to optimize caching strategies, parallelize jobs, integrate security scanning, and reduce build times. It identifies inefficiencies and suggests deployment-ready configurations.

Infrastructure-as-Code review covers Terraform configurations and Kubernetes manifests. This Skill audits these files for security hardening, least-privilege permissions, health checks, and deployment efficiency across development, staging, and production environments.

Multi-stage builds separate build dependencies from runtime layers, shrinking final image size and attack surface. This Skill configures stages to cache build artifacts, reduce layer count, and enforce non-root execution for faster, more secure deployments.

Yes. This Skill integrates secrets management and vulnerability scanning into pipeline reviews, ensuring security scanning runs early, secrets are never logged, and least-privilege permissions apply throughout development, staging, and production workflows.