endor-container

Scanning Docker images for vulnerabilities involves analyzing the image, Dockerfile, and docker-compose configurations to identify security issues and misconfigurations. This skill applies security best practices rules and policy templates to automate that review process.

Dockerfile security checks should review base image safety, privilege escalation risks, and configuration best practices. This skill analyzes Dockerfiles against security policy rules to pinpoint misconfigurations and suggest safer base images to minimize deployment risk.

Docker Compose security analysis requires Docker and the Endor MCP server installed as prerequisites. You need a Dockerfile in your repository root and an MCP-enabled environment like Endor CLI or Claude Code integration to trigger the configuration checks.

Automating container image scanning in CI pipelines involves integrating analysis logic into your build and deploy workflows. This skill fits into Git repositories and CI pipelines where image and configuration security matter, reading local script templates to evaluate compliance.

Finding safer base images requires analyzing your current Dockerfile and container image for known vulnerabilities. This skill scans your configurations and provides base image recommendations to minimize risk and ensure compliance within your development workflow.