skills.rest
kmshihab7878
kmshihab7878COMMUNITY
Explore all skills by this author →
GitHub

infrastructure-scanning

Scan Docker images, Terraform, Kubernetes, and Python dependencies for security flaws.

6|1|Updated Apr 7, 2026
Search Tags:#security#aws#infrastructure#iac#semgrep#trivy#checkov
One-click install
npx skills add https://github.com/kmshihab7878/claude-code-setup --skill infrastructure-scanning
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: infrastructure-scanning
Source: https://github.com/kmshihab7878/claude-code-setup/tree/main/skills/infrastructure-scanning
Command: npx skills add https://github.com/kmshihab7878/claude-code-setup --skill infrastructure-scanning

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates security scanning for container images, IaC configurations, and Python dependencies on AWS infrastructure to reduce risk and manual toil.

Core Features & Use Cases

  • Vulnerability scanning of container images, Python dependencies, and OS packages using Trivy.
  • IaC quality and misconfiguration checks for Terraform and Kubernetes manifests with Checkov.
  • Code pattern auditing and policy enforcement with Semgrep, plus guidance for remediation.
  • Use Case: Integrate into CI pipelines to catch issues before deployment and simplify compliance checks.

Quick Start

Run a full infrastructure scan on my AWS project to identify vulnerabilities in images, IaC, and dependencies.

Frequently Asked Questions about infrastructure-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Terraform and Kubernetes manifests for security misconfigurations?▼

You can scan Terraform and Kubernetes manifests for security misconfigurations using Checkov. This automates IaC quality checks to identify infrastructure flaws and provides guided remediation for your AWS deployments.

What is the best way to scan Docker images and Python dependencies for vulnerabilities in CI/CD?▼

The best way to scan Docker images and Python dependencies for vulnerabilities in CI/CD is using Trivy. This automates vulnerability scanning for OS packages and dependencies, catching issues before deployment on AWS infrastructure.

How does Semgrep enforce security policies on infrastructure code?▼

Semgrep enforces security policies on infrastructure code by auditing code patterns to detect flaws. It provides guided remediation to fix policy violations and reduce manual toil across your AWS-based deployment workflows.

Can I integrate automated security scanning into my existing CI pipelines for AWS?▼

Yes, you can integrate automated security scanning into your existing CI pipelines for AWS. This supports routine scanning of images, IaC, and runtime configurations to catch deployment issues early and simplify compliance checks.

Does this infrastructure scanning approach support severity filtering for vulnerabilities?▼

Yes, this infrastructure scanning approach supports severity filtering for vulnerabilities. You can configure Trivy, Checkov, and Semgrep to filter findings by severity, allowing you to prioritize guided remediation efforts effectively.

Related Skills

Explore More Software Engineering Skills→
alexander-danilenkoalexander-danilenko
14

devops-engineer

Automate CI/CD pipelines, Dockerfiles, Kubernetes manifests, and Terraform modules.

Community
Advanced
kvithayathilkvithayathil

security-scan

Scan codebases with 17 SAST engines and generate Markdown reports.

Community
Intermediate
HemantSudarshanHemantSudarshan

security-auditor

Audit software security posture across code, pipelines, and deployments.

Community
Advanced
dahatakedahatake
2

azure-compliance

Audit Azure resources for security vulnerabilities and compliance violations.

Community
Intermediate