scan-vulnerabilities

Scan container images for security vulnerabilities using Quay.io before deployment.

2|Updated Feb 16, 2026

Search Tags:#devops #deployment #security #container security #vulnerability scanning #quay

Ready to run

npx skills add https://github.com/dmzoneill/skills --skill scan-vulnerabilities-dmzoneill

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: scan-vulnerabilities
Source: https://github.com/dmzoneill/skills/tree/main/scan-vulnerabilities
Command: npx skills add https://github.com/dmzoneill/skills --skill scan-vulnerabilities-dmzoneill

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies security vulnerabilities in container images before they are deployed, preventing potential breaches and ensuring compliance.

Core Features & Use Cases

Container Image Scanning: Leverages Quay.io to scan specified container image tags for known security vulnerabilities.
Configurable Failure Policies: Allows users to define whether critical or high severity vulnerabilities should block deployment.
Optional Source Code Scanning: Can optionally perform source code security audits using tools like Bandit or npm audit.
Use Case: Before merging a pull request or releasing a new version, use this Skill to automatically scan the associated container image. If critical vulnerabilities are found, the deployment is blocked, and a notification is sent.

Quick Start

Use the scan-vulnerabilities skill to scan the image 'aap-aa-tenant/aap-aa-main/automation-analytics-backend-main:latest' for vulnerabilities.

Frequently Asked Questions about scan-vulnerabilities

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan container images for security vulnerabilities before deployment?▼

To scan container images for security vulnerabilities before deployment, use Quay.io to analyze specified image tags for known threats. This process proactively identifies vulnerabilities, preventing potential breaches and ensuring compliance before release.

Can I block deployment based on vulnerability severity?▼

Yes, you can block deployment based on vulnerability severity using configurable failure policies. This feature allows you to define whether critical or high severity vulnerabilities found during the Quay.io scan should halt the deployment pipeline.

Does container vulnerability scanning work with pull request approval workflows?▼

Container vulnerability scanning integrates directly with release, ephemeral deploy, and MR approval workflows. Before merging a pull request, the associated container image is automatically scanned and blocks the merge if critical vulnerabilities are detected.

How do I run a security scan on source code alongside container images?▼

To run a security scan on source code alongside container images, enable the optional source code scanning feature. This performs security audits using tools like Bandit or npm audit in addition to the standard Quay.io container image vulnerability scan.

What's the best way to automate vulnerability scanning for container security?▼

The best way to automate vulnerability scanning for container security is integrating Quay.io scans into your CI/CD pipeline. This automates checks for known vulnerabilities before merging pull requests or releasing new versions, blocking deployment and sending notifications if critical threats are found.