skill-devops-container-security

What problem does it solve?

Container security gaps during build and run-time can lead to vulnerable images and insecure deployments. This skill provides a structured approach to harden Dockerfiles, enforce runtime protections, and manage secrets and supply chain controls.

Core Features & Use Cases

• Multi-stage Dockerfiles and minimal runtime images to reduce attack surface.
• Non-root users, restricted capabilities, health checks, and resource limits to enforce runtime safety.
• Secrets handling and SBOM/supply-chain tooling integration to prevent secret leakage and supply chain risks.

Quick Start

Provide your application's source to generate a secure multi-stage Dockerfile and runtime security blueprint.