docker

Generate production Dockerfiles for .NET and Node.js applications with multi-stage builds.

Updated Apr 9, 2026
One-click install
npx skills add https://github.com/nist0/CoDev --skill docker-nist0
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: docker
Source: https://github.com/nist0/CoDev/tree/main/.github/skills/docker
Command: npx skills add https://github.com/nist0/CoDev --skill docker-nist0

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps automate and standardize Dockerfile authoring, base image selection, security practices, and CI integration for production environments.

Core Features & Use Cases

  • Dockerfile Authoring: Guided best practices for building Dockerfiles with multi-stage builds, caching, and environment management.
  • Base Image Selection: Strategies for choosing, pinning, and updating base images with security in mind.
  • Security Baseline: Ensuring containers run as non-root, with least privilege, and minimal attack surface.
  • CI Integration: Enhancements to CI workflows with image scanning, SBOM generation, and security gatekeeping.

Quick Start

Use the docker skill to generate a production-grade Dockerfile for a .NET 8 web API by providing the project directory as input.

Frequently Asked Questions about docker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a production-grade Dockerfile for a .NET or Node.js application?

To generate a production Dockerfile, provide your .NET or Node.js project directory as input. The skill outputs a Dockerfile utilizing multi-stage builds, caching, and non-root security baselines for those specific frameworks.

What are the best practices for multi-stage Docker builds in CI environments?

Docker CI best practices involve using multi-stage builds to minimize image size, pinning base images for security, and integrating image scanning with SBOM generation to establish automated security gatekeeping within your workflows.

How do I ensure my Docker containers run with least privilege and minimal attack surface?

To ensure containers run with least privilege, enforce a security baseline where containers operate as non-root users. This minimizes the attack surface and standardizes security practices across production environments.

Does this Docker generation process require Python to run?

Yes, the Docker generation process requires Python to execute. You must have a Python environment configured to run the scripts that output the standardized Dockerfiles and CI integration recommendations.

How do I select and pin secure base images for my production containers?

Base image selection involves choosing and pinning specific image versions using automated strategies. This ensures production containers use secure, updated base images while maintaining a minimal attack surface.

Can I integrate SBOM generation and image scanning into my Docker CI workflows?

Yes, you can enhance CI workflows with image scanning and SBOM generation. This integration provides security gatekeeping by analyzing generated Docker images for vulnerabilities before production deployment.