security-docker

To scan a Dockerfile for security vulnerabilities, run an audit to detect hardcoded secrets in ENV or ARG instructions, insecure COPY operations, and missing non-root user configurations, identifying common anti-patterns before deployment.

Common Docker Compose security risks include exposed sensitive ports, dangerous volume mounts like the Docker socket, and privileged container settings. Auditing configurations flags these insecure settings to protect containerized applications from exposure.

Yes, this Docker security audit requires installing ripgrep (rg). The Skill utilizes shell scripting and ripgrep for pattern matching against common security anti-patterns in your Dockerfile and Docker Compose configurations.

Yes, you can check Docker Compose configurations for dangerous volume mounts. The audit specifically flags risky mounts like the Docker socket, exposed sensitive ports, and privileged container settings to prevent security exposure.

The best way to find hardcoded API keys in Dockerfiles is to run a security audit that checks build arguments and environment variables. This automatically scans for critical security flaws like secrets before deploying a new microservice.