| name | container-images |
| description | Docker and OCI container image expertise for building, optimizing, and securing container images |
| allowed-tools | ["Bash","Read","Write","Edit","Glob","Grep"] |
| graph | {"domains":["domain:devops"],"specializations":["specialization:devops-sre-platform"],"skillAreas":["skill-area:containerization","skill-area:deployment-infrastructure-management"],"roles":["role:devops-engineer","role:platform-engineer"],"topics":["topic:immutable-infrastructure"]} |
Container Images Skill
Overview
Specialized skill for Docker and OCI container image development, optimization, and security. Provides expert capabilities for building production-ready container images.
Capabilities
Dockerfile Development
- Analyze and optimize existing Dockerfiles
- Create multi-stage build configurations
- Implement build argument patterns
- Design base image hierarchies
- Handle platform-specific builds (multi-arch)
Image Optimization
- Minimize image layer count and size
- Optimize layer caching strategies
- Implement .dockerignore patterns
- Remove unnecessary dependencies
- Use distroless/minimal base images
Security Scanning
- Interpret vulnerability scan results (Trivy, Snyk, Grype)
- Prioritize CVE remediation
- Recommend secure base images
- Implement image signing (Cosign, Notary)
- Configure admission policies
Registry Operations
- Push, pull, and tag images
- Configure registry authentication
- Implement image retention policies
- Handle multi-registry strategies
- Manage image manifests and indexes
Build Integration
- Integrate with CI/CD pipelines
- Configure build caching (BuildKit)
- Implement remote builders
- Handle secrets during builds
- Set up automated builds
Target Processes
container-image-management.js - Container image lifecycle
security-scanning.js - Image vulnerability scanning
cicd-pipeline-setup.js - Build pipeline configuration
Usage Context
This skill is invoked when processes require:
- Creating optimized Dockerfiles
- Reducing container image sizes
- Addressing security vulnerabilities in images
- Setting up container build pipelines
- Managing container registries
Dependencies
- Docker CLI or compatible (Podman, nerdctl)
- Container registry access
- Vulnerability scanners (Trivy, Snyk)
- BuildKit for advanced builds
Output Formats
- Dockerfile configurations
- Build optimization reports
- Vulnerability analysis reports
- Registry operation logs
- Multi-stage build templates