Audit Docker Compose services, TLS certificates, and environment files for security misconfigurations.
npx skills add https://github.com/47network/Sven --skill infra-scanner
Please help me install this Agent Skill. Skill: infra-scanner Source: https://github.com/47network/Sven/tree/main/skills/security/infra-scanner Command: npx skills add https://github.com/47network/Sven --skill infra-scanner
Audit Docker Compose services, TLS certificates, and environment files for security misconfigurations, helping teams reduce risk from misconfigurations and exposures.
Run the infra-scanner against your Docker Compose definitions and environment files to generate a security audit report.
High-intent search queries and answers about installing and using this skill.
Audit Docker Compose services by scanning for privileged mode, dangerous caps, host mounts, exposed ports, and hardcoded secrets. The scanner reviews your multi-service definitions and returns a structured report of security findings.
Check TLS certificates for weak configurations and expiry by running the TLS audit. This validates your certificates against security standards and surfaces any weak setups or approaching expirations in a structured report.
Scan .env files for insecure values by executing the environment audit. This inspects your environment files for hardcoded secrets and insecure variables, generating a unified security report.
Enforce security gates in CI pipelines by running a full audit report across your multi-service deployments. This surfaces privileged containers, weak TLS, and insecure env vars before deployment.
Generate a security report for Docker Compose and environment files by running the full report action. It consolidates findings from services, TLS, and env vars into one unified report for compliance reviews.
The audit surfaces hardcoded secrets across multi-service stacks by checking Docker Compose definitions and .env files. It identifies exposed secrets and insecure values, returning them in a structured findings report.
adelabdelgawadGenerate multi-service Docker Compose infrastructure for FastAPI and Next.js applications.
josavicentevwAutomate security scanning and governance across CI/CD pipelines and compliance workflows.
matteocervelliScan codebases for secrets, vulnerable dependencies, and insecure patterns.
jayjpatel9717Scan Docker images and audit Kubernetes clusters for security vulnerabilities.
