skills.rest
kocakburhan
kocakburhanCOMMUNITY
Explore all skills by this author →
GitHub

sc-iac

Scan Dockerfiles, Kubernetes manifests, Terraform, and GitHub Actions for misconfigurations.

Updated Aug 23, 2026
Search Tags:#security#kubernetes#docker#terraform#iac#github-actions#infrastructure-as-code
One-click install
npx skills add https://github.com/kocakburhan/emlakdefter --skill sc-iac-kocakburhan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sc-iac
Source: https://github.com/kocakburhan/emlakdefter/tree/main/.agents/skills/security-check/skills/sc-iac
Command: npx skills add https://github.com/kocakburhan/emlakdefter --skill sc-iac-kocakburhan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This IaC security scanner detects misconfigurations and insecure patterns across infrastructure-as-code, helping teams reduce the risk of vulnerabilities being deployed.

Core Features & Use Cases

  • Scans Dockerfiles for root access, secret exposure, and outdated base images.
  • Validates Kubernetes manifests, Terraform configurations, and GitHub Actions workflows for common security gaps.
  • Integrates into CI pipelines to fail builds when critical IaC issues are detected.

Quick Start

Run the IaC security scanner on your repository to detect misconfigurations across Dockerfiles, Kubernetes manifests, Terraform configurations, and GitHub Actions workflows.

Frequently Asked Questions about sc-iac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Terraform and Kubernetes manifests for security misconfigurations?▼

Run an IaC security scan to detect misconfigurations across Terraform configurations and Kubernetes manifests. The scanner identifies insecure patterns like root access, privileged containers, and overly permissive IAM policies.

What insecure patterns are commonly found in Dockerfiles during IaC scanning?▼

IaC scanning detects Dockerfile misconfigurations including root access usage, secret exposure, and outdated base images. It enforces checks to reduce the risk of vulnerabilities being deployed from insecure container builds.

Can I automate infrastructure-as-code security checks in GitHub Actions workflows?▼

Yes, you can integrate IaC security scanning directly into GitHub Actions workflows and CI/CD pipelines. It validates workflow configurations and fails builds automatically when critical infrastructure security issues are detected.

Does this IaC security scanner detect public storage and injection vulnerabilities in Terraform?▼

Yes, the IaC scanner validates Terraform configurations for public storage exposure, IAM policy gaps, secrets, and injection vulnerabilities. It applies these checks across infrastructure-as-code to prevent insecure deployments.

What's the best way to enforce privileged container restrictions in Kubernetes manifests?▼

Use an IaC security scanner to validate Kubernetes manifests and enforce checks against privileged containers and root access. Integrating it into CI pipelines automatically fails builds when these security gaps are detected.

Related Skills

Explore More Software Engineering Skills→
kfolkeskfolkes
2

checkov-security-scan

Scan Infrastructure as Code for security misconfigurations and compliance violations using Checkov.

Community
Intermediate
alxayoalxayo
17

checkov-security-scan

Detect security misconfigurations and compliance violations in Infrastructure as Code.

Community
Advanced
sorodriguezzsorodriguezz

InterSystems Cloud Manager Guide

Automate InterSystems IRIS provisioning and deployment using declarative JSON and Terraform.

Community
Advanced
devCharuzudevCharuzu

cloud-security

Analyze AWS, Azure, and GCP cloud configurations for misconfigurations and exposure risks.

Community
Intermediate