slim-container-vulnerability-scanning

What problem does it solve?

This Skill automates the detection of security vulnerabilities in container images and project dependencies, reducing manual security checks and helping teams maintain a secure baseline.

Core Features & Use Cases

• Automated Scans: Scan container images, base images, and package-manager dependencies (NPM, Maven, PyPI, etc.) for known CVEs.
• Pre-commit & CI/CD Integration: Gate code commits and pipelines based on vulnerability findings to prevent vulnerable code from entering the repository.
• Comprehensive Guidance: Provide remediation steps, suggested fixes, and actionable insights for identified vulnerabilities in a reproducible workflow.

Quick Start

Install Grype and ensure it is in your PATH. Run a manual scan of your repository dependencies with grype dir:. Set up automated pre-commit scanning by installing pre-commit, copying the pre-commit config to your repo root, and enabling the hook:

• pip install pre-commit
• cp assets/pre-commit-config.yml .pre-commit-config.yaml
• pre-commit install
• pre-commit run --all-files