What problem does it solve? Standard Dockerfiles built on Docker Hub or distro-based images (Ubuntu, Alpine, Debian) ship with large CVE counts and unnecessary bloat. This Skill guides an AI agent to author or migrate Dockerfiles onto Minimus hardened distroless images, reducing vulnerabilities while keeping builds working. ## Core Features & Use Cases - Dockerfile migration: Converts existing Dockerfiles to Minimus base images with a minimal diff, preserving valid WORKDIR, ENV, COPY, and CMD instructions. - Multi-stage build construction: Detects shell-less production images and builds a two-stage Dockerfile using the -dev variant for compilation and the production variant for runtime. - Package resolution: Replaces apt-get/apk add installs by discovering equivalent Minimus apk packages and installing them only in the build stage. - Build verification: Builds and runs the resulting image, mapping error signatures (missing shell, permission denied, manifest unknown) to the correct fix. - Use Case: A team wants to migrate a Node.js service from node:22 on Docker Hub to a hardened image. The Skill discovers reg.mini.dev/node:22, reads its runtime contract, writes a multi-stage Dockerfile, verifies the build, and reports the CVE reduction. ## Quick Start Migrate my existing Dockerfile to use a Minimus hardened base image and verify that it builds and runs.
