Detect security misconfigurations in Dockerfiles, Kubernetes manifests, Terraform, and CI/CD workflows.
npx skills add https://github.com/ersinkoc/security-check --skill sc-iac
Please help me install this Agent Skill. Skill: sc-iac Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-iac Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-iac
This Skill analyzes Infrastructure-as-Code artifacts (Dockerfiles, Kubernetes manifests, Terraform files, and CI workflows) to detect security misconfigurations and weaknesses across the build-to-runtime pipeline.
Run the IaC scan against your repository to identify misconfigurations in Dockerfiles, Kubernetes manifests, Terraform configurations, and GitHub Actions workflows.
High-intent search queries and answers about installing and using this skill.
To check Dockerfiles and GitHub Actions workflows for insecure defaults, the IaC scan identifies insecure workflow patterns and Docker misconfigurations such as running as root. It analyzes your CI/CD pipelines to catch exposure risks and privilege escalation before deployment.
To check Dockerfiles and GitHub Actions workflows for insecure defaults, the IaC scan identifies insecure workflow patterns and Docker misconfigurations such as running as root. It analyzes your CI/CD pipelines to catch exposure risks and privilege escalation before deployment.
To check Dockerfiles and GitHub Actions workflows for insecure defaults, the IaC scan identifies insecure workflow patterns and Docker misconfigurations such as running as root. It analyzes your CI/CD pipelines to catch exposure risks and privilege escalation before deployment.
To check Dockerfiles and GitHub Actions workflows for insecure defaults, the IaC scan identifies insecure workflow patterns and Docker misconfigurations such as running as root. It analyzes your CI/CD pipelines to catch exposure risks and privilege escalation before deployment.
To check Dockerfiles and GitHub Actions workflows for insecure defaults, the IaC scan identifies insecure workflow patterns and Docker misconfigurations such as running as root. It analyzes your CI/CD pipelines to catch exposure risks and privilege escalation before deployment.
To check Dockerfiles and GitHub Actions workflows for insecure defaults, the IaC scan identifies insecure workflow patterns and Docker misconfigurations such as running as root. It analyzes your CI/CD pipelines to catch exposure risks and privilege escalation before deployment.
marcoguillermazDetect infrastructure security risks in CI/CD and IaC files via static analysis.
kfolkesScan Infrastructure as Code for security misconfigurations and compliance violations using Checkov.
andisabGenerate secure GitLab CI/CD pipelines for Terraform and Kubernetes deployments.
devendrapratapsinghAudit container images, Kubernetes configurations, cloud environments, and infrastructure as code for security vulnerabilities.
