ubi-scan

Scan GitHub repositories and Dockerfiles to identify UBI image versions.

2|Updated Jul 8, 2024
One-click install
npx skills add https://github.com/redhat-best-practices-for-k8s/telco-bot --skill ubi-scan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ubi-scan
Source: https://github.com/redhat-best-practices-for-k8s/telco-bot/tree/main/.claude/skills/ubi-scan
Command: npx skills add https://github.com/redhat-best-practices-for-k8s/telco-bot --skill ubi-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Track and identify UBI image version usage in Dockerfiles across GitHub organizations to ensure base images stay secure and supported.

Core Features & Use Cases

  • UBI version discovery: scans Dockerfiles in targeted repositories to detect all used UBI versions.
  • Compliance & remediation signals: surfaces repositories on deprecated or end-of-life UBIs for action.
  • Reporting & integration: outputs progress and findings for telco-bot, enabling issue creation and notifications.

Quick Start

Run a scan by invoking the ubi-lookup.sh script with your desired options to start collecting UBI usage data.

Frequently Asked Questions about ubi-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Dockerfiles for UBI image versions across GitHub organizations?

To scan Dockerfiles for UBI image versions, you invoke the ubi-lookup.sh script with your desired options to detect all used UBI versions across targeted GitHub repositories. The script outputs progress and actionable findings.

What is the best way to track deprecated UBI base images in my repositories?

Tracking deprecated UBI base images requires scanning Dockerfiles to surface repositories running on end-of-life versions. This process generates compliance and remediation signals, enabling you to take action on outdated or vulnerable UBI images.

Can I use this UBI scanning tool to generate GitHub issue reports?

Yes, you can use this UBI scanning tool to generate issue-ready data for GitHub. The script outputs findings that enable issue creation and notifications, allowing you to track container security and compatibility directly.

Does the UBI version lookup script require dependencies to run?

No, the UBI version lookup script requires no dependencies to run. It relies solely on the ubi-lookup.sh script to perform lookups and outputs progress, findings, and issue-ready data.

When do I need to scan UBI usage for container security?

You need to scan UBI usage for container security when you want to ensure base images stay secure and supported. Scanning identifies outdated or vulnerable UBIs across multiple GitHub organizations to prevent compatibility issues.