infrastructure-scanning

Name: infrastructure-scanning
Availability: InStock
Author: kmshihab7878

Scan Docker images, Terraform, Kubernetes, and Python dependencies for security flaws.

6|1|Updated Apr 7, 2026

Search Tags:#security #aws #infrastructure #iac #semgrep #trivy #checkov

Ready to run

npx skills add https://github.com/kmshihab7878/claude-code-setup --skill infrastructure-scanning

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: infrastructure-scanning
Source: https://github.com/kmshihab7878/claude-code-setup/tree/main/skills/infrastructure-scanning
Command: npx skills add https://github.com/kmshihab7878/claude-code-setup --skill infrastructure-scanning

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates security scanning for container images, IaC configurations, and Python dependencies on AWS infrastructure to reduce risk and manual toil.

Core Features & Use Cases

Vulnerability scanning of container images, Python dependencies, and OS packages using Trivy.
IaC quality and misconfiguration checks for Terraform and Kubernetes manifests with Checkov.
Code pattern auditing and policy enforcement with Semgrep, plus guidance for remediation.
Use Case: Integrate into CI pipelines to catch issues before deployment and simplify compliance checks.

Quick Start

Run a full infrastructure scan on my AWS project to identify vulnerabilities in images, IaC, and dependencies.

Frequently Asked Questions about infrastructure-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Terraform and Kubernetes manifests for security misconfigurations?▼

You can scan Terraform and Kubernetes manifests for security misconfigurations using Checkov. This automates IaC quality checks to identify infrastructure flaws and provides guided remediation for your AWS deployments.

What is the best way to scan Docker images and Python dependencies for vulnerabilities in CI/CD?▼

The best way to scan Docker images and Python dependencies for vulnerabilities in CI/CD is using Trivy. This automates vulnerability scanning for OS packages and dependencies, catching issues before deployment on AWS infrastructure.

How does Semgrep enforce security policies on infrastructure code?▼

Semgrep enforces security policies on infrastructure code by auditing code patterns to detect flaws. It provides guided remediation to fix policy violations and reduce manual toil across your AWS-based deployment workflows.

Can I integrate automated security scanning into my existing CI pipelines for AWS?▼

Yes, you can integrate automated security scanning into your existing CI pipelines for AWS. This supports routine scanning of images, IaC, and runtime configurations to catch deployment issues early and simplify compliance checks.

Does this infrastructure scanning approach support severity filtering for vulnerabilities?▼

Yes, this infrastructure scanning approach supports severity filtering for vulnerabilities. You can configure Trivy, Checkov, and Semgrep to filter findings by severity, allowing you to prioritize guided remediation efforts effectively.