skills.rest
fgarofalo56
fgarofalo56COMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-scanner

Scan container images, dependencies, and infrastructure configurations for security vulnerabilities.

6|2|Updated Jan 22, 2026
Search Tags:#security#vulnerability#container security#DAST#scanning#SAST#IaC scanning
One-click install
npx skills add https://github.com/fgarofalo56/Suppercharge_Microsoft_Fabric --skill security-scanner-fgarofalo56
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/fgarofalo56/Suppercharge_Microsoft_Fabric/tree/main/.github/skills/security-scanner
Command: npx skills add https://github.com/fgarofalo56/Suppercharge_Microsoft_Fabric --skill security-scanner-fgarofalo56

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security risks in code, container images, and infrastructure by performing comprehensive security scanning and vulnerability assessments.

Core Features & Use Cases

  • Container Image Scanning: Detects known vulnerabilities in Docker images using tools like Trivy.
  • Dependency Scanning: Identifies vulnerable libraries and packages in your project's dependencies (e.g., npm, Python).
  • SAST/DAST: Performs static and dynamic analysis to find security flaws in your code.
  • Infrastructure Security: Scans Infrastructure as Code (IaC) files and Kubernetes configurations for misconfigurations.
  • Use Case: Before deploying a new microservice, use this Skill to scan its container image for critical vulnerabilities and check its npm dependencies for known exploits.

Quick Start

Use the security-scanner skill to perform a baseline scan on the current directory for vulnerabilities.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Docker container images for known vulnerabilities?▼

To scan Docker container images for known vulnerabilities, this Skill utilizes Trivy to detect security issues within your images, aiding in compliance and system hardening before deployment.

Can I check my Infrastructure as Code files for security misconfigurations?▼

Yes, you can check Infrastructure as Code files for security misconfigurations by using this Skill to scan IaC and Kubernetes configurations with Checkov, identifying potential infrastructure risks.

What's the best way to find vulnerable npm and Python dependencies?▼

The best way to find vulnerable npm and Python dependencies is to perform dependency scanning, which identifies vulnerable libraries and packages in your project to mitigate known exploits.

Does this scanner perform both static and dynamic analysis on source code?▼

Yes, this scanner performs both SAST and DAST analysis on your codebase, utilizing tools like Semgrep to find security flaws and perform comprehensive vulnerability assessments.

How do I run a security scan on my current directory?▼

To run a security scan on your current directory, simply use this Skill to perform a baseline automated vulnerability assessment and code analysis across your local project files.

Why should I use multiple tools like Snyk and Trivy for vulnerability assessment?▼

Using multiple tools like Snyk and Trivy for vulnerability assessment provides comprehensive coverage across container images, dependencies, and code, ensuring no single tool misses critical security flaws.

Related Skills

Explore More Software Engineering Skills→
JosiahSiegelJosiahSiegel
51

defender-for-devops

Integrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.

Community
Advanced
zapabobzapabob
2

sec-audit

Scan dependencies and custom code for security vulnerabilities.

Community
Advanced
tranhieutttranhieutt
70

gitlab-ci-patterns

Build GitLab CI/CD pipelines with multi-stage builds, tests, and deployments.

Community
Advanced
HouseGarofaloHouseGarofalo
3

security-scanner

Scan container images, dependencies, and IaC for security vulnerabilities.

Official
Advanced