skills.rest
cuioss
cuiossOFFICIAL
Explore all skills by this author →
GitHub

oci-security

Deliver structured OCI container security guidance for runtime hardening, supply chain, and OWASP controls.

4|Updated Jan 11, 2026
Search Tags:#owasp#supply-chain-security#oci#sbom#container-security#vulnerability-scanning#runtime-hardening
One-click install
npx skills add https://github.com/cuioss/plan-marshall --skill oci-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: oci-security
Source: https://github.com/cuioss/plan-marshall/tree/main/marketplace/bundles/pm-dev-oci/skills/oci-security
Command: npx skills add https://github.com/cuioss/plan-marshall --skill oci-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

OCI container security guidance is often scattered across many standards and best-practice documents. This Skill provides a focused, reference-driven approach for runtime hardening, supply chain security, and OWASP container controls, enabling teams to load targeted references on demand.

Core Features & Use Cases

  • On-demand references: Load runtime security, supply chain, or OWASP guidance as needed without overwhelming the context.
  • Reference-mode operation: Treat reference materials as loadable modules that guide hardening and compliance tasks.
  • Scalable for teams: Suitable for CI/CD hardening reviews, incident response planning, and security audits.

Quick Start

Load the runtime-security reference to begin hardening OCI containers.

Frequently Asked Questions about oci-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is OCI container security hardening and when do I need it?▼

Runtime hardening for OCI containers involves configuring container runtimes to minimize attack surfaces by limiting privileges and isolating processes. You need it when deploying OCI containers in production to enforce security boundaries and reduce vulnerability exposure.

How do I ensure supply chain security and provenance for OCI containers?▼

Ensure supply chain security for OCI containers by generating SBOMs, scanning images for vulnerabilities, and verifying artifact provenance. This process tracks components from build to deployment, guaranteeing runtime integrity and compliance.

Does this approach support on-demand loading of OWASP container controls?▼

Yes, this approach supports on-demand loading of OWASP container controls. You can selectively load specific reference modules for vulnerability scanning or runtime hardening, preventing context overload during targeted security audits.

How do I apply OWASP container controls without overwhelming my context?▼

Apply OWASP container controls without overwhelming context by using on-demand modular reference loading. Load only the specific runtime hardening or vulnerability scanning guidelines needed for your task, keeping the context window focused and efficient.

What is the best way to start hardening OCI containers for runtime security?▼

The best way to start hardening OCI containers is to load the runtime-security reference module first. This provides structured guidance for configuring runtimes and applying OWASP controls on demand for your specific security audit or review.

Related Skills

Explore More Software Engineering Skills→
cuiosscuioss
4

oci-standards

Standardizes OCI container image building, labeling, health probing, and Dockerfile hygiene for CI/CD workflows.

Official
Intermediate
meridianhubmeridianhub
10

skill-security-practices

Automate security scanning with gosec, Trivy, and SBOM generation in CI/CD pipelines.

Official
Advanced
sjinkssjinks

security-review-owasp-infrastructure-as-code-security

Review Infrastructure as Code security controls for privilege, isolation, and deployment weaknesses.

Community
Advanced
AminAlamAminAlam
26

Static Analysis for Medical Devices

Enforce MISRA C/C++ and CERT C/C++ compliance in medical device software.

Community
Intermediate