Security Scanner

Security scanning identifies misconfigurations in Docker Compose, Kubernetes manifests, and Terraform files by applying rule-based detection for risky patterns like privileged containers, public port binding, and missing resource limits. Run the Skill against your configuration directory to generate a severity-ranked report with remediation guidance.

Configuration scanners detect critical issues including privileged container execution, host network access, writable root filesystems, root user execution, missing security options, absent health checks, and undefined resource limits. Each finding maps to CIS and OWASP benchmarks with actionable fixes.

Yes, security scanners analyze Terraform infrastructure-as-code files alongside Docker and Kubernetes configs to identify compliance deviations and security misconfigurations. Results include severity levels and concrete remediation steps aligned with security best practices.

Run configuration scanning as a pre-deployment step against your entire infrastructure directory to identify and remediate vulnerabilities instantly. The Skill outputs structured reports with findings, risk levels, locations, and specific code examples for fixes.

Configuration scanning detects static misconfigurations and risky settings in deployment files before runtime; it catches design flaws like missing limits and privileged modes. Runtime monitoring watches live container behavior and system calls, complementing pre-deployment scanning for defense in depth.

No, the Skill applies built-in rule-based detection for known risky patterns across Docker Compose, Kubernetes, and Terraform without custom configuration. It identifies critical security flaws automatically and provides prioritized, remediation-focused reports.