image-inspect

Validates Red Hat registry images and extracts SBOM artifact references for compliance auditing.

48|31|Updated Feb 2, 2026
One-click install
npx skills add https://github.com/RHEcosystemAppEng/agentic-plugins --skill image-inspect
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: image-inspect
Source: https://github.com/RHEcosystemAppEng/agentic-plugins/tree/main/ocp-admin/skills/image-inspect
Command: npx skills add https://github.com/RHEcosystemAppEng/agentic-plugins --skill image-inspect

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires regclient, python, and includes scripts (resource) and assets (resource) components.

What problem does it solve?

This Skill streamlines the process of inspecting Red Hat container images, validating registry ownership, and extracting Software Bill of Materials (SBOM) information for security and compliance purposes.

Core Features & Use Cases

  • Image Metadata Extraction: Fetches and validates image labels and registry ownership.
  • SBOM Extraction: Resolves image tags/digests via SBOM and reports artifact references.
  • Use Case: Ensure that your container images are built from official Red Hat repositories and are compliant with security standards by using this Skill to automatically extract and validate SBOMs.

Quick Start

Run the image-inspect skill with a container image reference, such as docker.io/rhel7:latest.

Frequently Asked Questions about image-inspect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract SBOM information from a Red Hat container image?

To extract SBOM information from a Red Hat container image, you provide an image reference to the inspection script. The tool validates the official registry ownership, resolves tags and digests, and reports artifact references for security and compliance auditing.

What is the process for validating container image registry ownership for security compliance?

Validating container image registry ownership involves checking the image reference against official Red Hat registries. The inspection process fetches image labels and confirms the repository source, ensuring your containerized applications meet security and compliance standards.

Can I use Python scripts to automate Red Hat container image inspection?

Yes, you can use Python scripts to automate Red Hat container image inspection. The automation requires Python and regclient to validate references, extract image metadata, and resolve SBOM data without manual intervention.

How do I check if my container images are built from official Red Hat repositories?

To check if container images are built from official Red Hat repositories, run an automated inspection with the image reference. The tool validates the registry ownership and extracts metadata to confirm the image source for compliance.

Does this container image inspection tool work with any image registry?

The container image inspection tool is specifically designed for official Red Hat registries. It validates image references and extracts SBOM information from those sources to ensure security and compliance for containerized applications.

What dependencies do I need to extract SBOM and image metadata?

You need Python and regclient installed to extract SBOM and image metadata. These dependencies allow the scripts to validate container image references, fetch labels, and resolve artifact references for security auditing.