mcr-analysis

What problem does it solve?

This Skill eliminates the security and overhead risks of running untrusted container code to analyze .NET assemblies in Microsoft Container Registry (MCR) images, enabling safe, efficient security assessments of Azure and .NET container deployments.

Core Features & Use Cases

• Pure HTTP Image Access: Search, list tags, and extract .NET binaries from MCR images without requiring Docker or container runtime execution.
• Targeted Binary Analysis: Scan extracted assemblies for vulnerabilities, with built-in prioritization of application-specific code over framework components to reduce false positives.
• Use Case: A security analyst can assess an Azure Functions .NET 8 runtime image for unpatched vulnerabilities by extracting its binaries and scanning them, all without deploying the container to a test environment.

Quick Start

Use the mcr-analysis skill to extract and scan all .NET assemblies from the dotnet/aspnet:8.0 MCR image for security vulnerabilities.