Scan Dockerfiles and compose files for security risks and generate DOCK findings.
npx skills add https://github.com/fatihkan/badi --skill sc-docker-fatihkan
Please help me install this Agent Skill. Skill: sc-docker Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-docker Command: npx skills add https://github.com/fatihkan/badi --skill sc-docker-fatihkan
Docker deployments often suffer from misconfigurations and exposure of secrets. This skill provides automated checks for Dockerfile best practices, secrets handling, compose security, and runtime hardening to reduce risk and speed up secure delivery.
Run the sc-docker skill against your Dockerfile and docker-compose configurations to perform automated security checks and generate actionable findings.
High-intent search queries and answers about installing and using this skill.
Scanning Dockerfiles for security issues involves detecting root user usage, secrets in image layers, missing .dockerignore files, and unverified base images. Automated checks generate structured findings with severity levels and specific remediation steps to fix each vulnerability.
Yes, validating docker-compose files for security misconfigurations is supported. The scanning process evaluates compose configurations and runtime settings to identify hardening gaps and insecure parameters, providing actionable findings to reduce deployment risks.
Docker runtime hardening secures production environments by detecting insecure runtime settings and enforcing best practices. Automated checks identify misconfigurations in active deployments and provide structured remediation steps to close security gaps and reduce the attack surface.
Integrating Docker security scanning into CI pipelines automates the detection of secrets in layers, misconfigurations, and hardening gaps during the build process. It outputs structured findings with DOCK identifiers and severity ratings to fail builds or trigger remediation workflows.
Yes, Docker security scanning detects unverified base images and missing .dockerignore files. It implements specific detection rules for these issues alongside root user usage and ADD vs COPY instructions, outputting findings with file references and remediation steps.
cosmicstack-labsGenerate multi-stage Dockerfiles and docker-compose configurations with health checks and security hardening.
Marwan78888Identify security vulnerabilities in code, dependencies, and infrastructure.
VanhPokerOptimize Docker container builds, security, and deployment patterns.
kalshamsiScan Docker images and Dockerfiles for CVEs and misconfigurations.
