Skills
.Work. You
Rest

secure-container-build

Community

Secure Wolfi containers with multi-stage builds.

Software Engineering#security#container#multistage#podman#wolfi#rootless
Authorpigfoot
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill guides building secure, minimal container images using Wolfi runtime, multi-stage builds, and a non-root user by default, reducing attack surface and runtime footprint.

Core Features & Use Cases

  • Wolfi glibc-dynamic runtime with non-root UID for secure execution
  • Multi-stage builds to minimize runtime image size
  • Init with tini to handle signals and proper process supervision
  • Templates for common stacks: Python/uv, Bun, Node.js/pnpm, Golang (static/CGO), Rust (glibc/musl)
  • Allocator optimization options for Rust containers
  • CI/CD-ready templates and best practices

Quick Start

Copy the Containerfile templates from assets (for the desired runtime) and adjust the RUNTIME_TAG, then build with Podman, splitting builder and runtime stages.

Dependency Matrix

Required Modules

None required

Components

assets

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: secure-container-build
Download link: https://github.com/pigfoot/claude-code-hubs/archive/main.zip#secure-container-build

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.