rule-docker

What problem does it solve?

Dockerfiles and docker-compose configurations often drift from secure, maintainable conventions. This skill provides guardrails to enforce base image pinning, multi-stage builds, non-root user execution, layer hygiene, and secrets handling, ensuring consistent and auditable container practices across projects.

Core Features & Use Cases

• Enforce pinned base images with digests and non-latest tags.
• Enforce multi-stage build patterns and runtime minimal images.
• Enforce non-root execution and proper file permissions.
• Maintain layer hygiene and avoid caching pitfalls.
• Enforce secure handling of secrets and environment variables.
• Provide governance-ready checks for CI/CD pipelines and code reviews.
• Use Case: Ensure a repository’s Docker configurations meet FedRAMP-like security and production-readiness standards.

Quick Start

Apply the rule-docker skill to validate Dockerfiles and docker-compose configurations against the defined conventions.