Identify Docker security issues in Dockerfiles, compose configurations, and runtime containers.
npx skills add https://github.com/ersinkoc/security-check --skill sc-docker
Please help me install this Agent Skill. Skill: sc-docker Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-docker Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-docker
Docker configurations and runtimes often harbor subtle security misconfigurations, secrets leakage, and image-hardening gaps that raise risk across build, deployment, and runtime environments.
Run sc-docker to scan Dockerfiles and docker-compose files in your repository and report findings.
High-intent search queries and answers about installing and using this skill.
Dockerfile security scanning identifies misconfigurations like root users, secrets exposure, and privilege escalation. It checks Dockerfiles and docker-compose configurations, then outputs actionable remediation steps for hardening your container images.
Docker container security misconfigurations include running as root, exposed secrets, excessive privileges, and missing runtime protections. Scanning detects these vulnerabilities in build and runtime environments, providing standardized findings for production hardening.
Docker runtime hardening checks validate read-only filesystems, dropped capabilities, seccomp profiles, and AppArmor configurations. Scanning restricted namespaces and runtime settings ensures containers are protected against privilege escalation in production.
Docker security checks integrate into CI pipelines to continuously scan repository Dockerfiles and compose files. This automated scanning generates actionable remediation steps for both CI/CD and production environments.
Docker security scanning covers docker-compose configurations alongside Dockerfiles. It evaluates compose files for root users, secrets handling, privilege escalation, and health checks to ensure deployment configurations meet hardening standards.
Automating Docker image hardening involves scanning Dockerfiles and compose files for misconfigurations, secrets leakage, and privilege gaps. This generates standardized findings that DevOps teams use to apply recommended mitigations across environments.
xlelibertyAnalyze Dockerfiles and compose services for optimization and security.
rcrathMonitor GitHub issues for regressions and report findings in audio format.
alirezarezvaniAutomate security scanning, vulnerability assessment, and compliance checks with Python scripts.
adaptive-enforcement-labEnforce Kyverno Pod Security Standards with YAML policies and compliance reports.
