container-validator

What problem does it solve?

This Skill ensures your Dockerfiles, Kubernetes manifests, and Docker Compose files adhere to best practices, security standards, and compliance requirements. It prevents misconfigurations and vulnerabilities that can lead to costly production issues and security breaches.

Core Features & Use Cases

• Dockerfile Validation: Checks for best practices like running as a non-root user, including health checks, and optimizing image layers.
• Kubernetes Manifest Validation: Verifies resource limits, liveness/readiness probes, and secure security contexts in K8s deployments.
• Container Security Scanning: Identifies potential security risks, exposed secrets, and compliance violations across your container configurations.
• Use Case: Integrate this Skill into your CI/CD pipeline to automatically scan new Dockerfiles and Kubernetes manifests, flagging critical security flaws and performance bottlenecks before deployment.

Quick Start

Validate the Dockerfile in the current directory for best practices and security issues.