skills.rest
endorlabs
endorlabsOFFICIAL
Explore all skills by this author →
Website𝕏@EndorLabsGitHub

endor-container

Scan container images and Dockerfiles for security misconfigurations and risky patterns.

2|Updated Feb 4, 2026
Search Tags:#vulnerability#remediation#docker#dockerfile#container-security#image-scan
One-click install
npx skills add https://github.com/endorlabs/skills-ideas --skill endor-container-endorlabs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: endor-container
Source: https://github.com/endorlabs/skills-ideas/tree/main/skills/endor-container
Command: npx skills add https://github.com/endorlabs/skills-ideas --skill endor-container-endorlabs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill identifies security issues in container images and Dockerfiles, helping teams reduce risk in build pipelines and deployments.

Core Features & Use Cases

  • Dockerfile analysis detects risky patterns such as running as root, using the latest tag, exposed ports without protective measures, secrets in build args, and missing health checks.
  • Image-level scanning surfaces vulnerabilities, misconfigurations, and dangerous dependencies before release.
  • Provides actionable remediation guidance to harden container configurations during CI/CD and runtime.

Quick Start

Scan a Docker image or Dockerfile to receive a prioritized security report.

Frequently Asked Questions about endor-container

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a Dockerfile for security misconfigurations?▼

Image scanning surfaces vulnerabilities, misconfigurations, and dangerous dependencies before release. It checks for risky patterns such as running as root, missing health checks, and unprotected exposed ports to reduce risk in build pipelines and deployments.

Can I automate container security checks in CI/CD workflows?▼

Dockerfile security analysis detects running as root, using the latest tag, exposed ports without protective measures, secrets in build args, and missing health checks. It provides actionable remediation guidance to harden container configurations during CI/CD and runtime.

What are common Dockerfile security risks I should check before deployment?▼

Yes, container image scanning identifies security issues before release. It surfaces vulnerabilities, misconfigurations, and dangerous dependencies in container images, providing actionable remediation guidance to reduce deployment risk.

Does container security scanning provide actionable remediation steps?▼

Container security scanning checks for running as root, using the latest tag, exposed ports, secrets in build args, and missing health checks. It returns a prioritized remediation checklist to fix these identified security issues.

Related Skills

Explore More Software Engineering Skills→
igpastorigpastor

Infrastructure as Code Skill

Generate Terraform, Kubernetes, Helm, CloudFormation, and Docker Compose configurations for cloud resources.

Community
Advanced
meridianhubmeridianhub
10

skill-security-practices

Automate security scanning with gosec, Trivy, and SBOM generation in CI/CD pipelines.

Official
Advanced
edulazaroedulazaro
12

lc:dead-code

Identify and remove unused classes, methods, routes, views, and imports in Laravel applications via static analysis.

Community
Advanced
nikhillinitnikhillinit

security-scanner

Detect security vulnerabilities, secrets, and misconfigurations in codebases.

Community
Advanced