drin-docker-image-hardener

Étoiles9

Forks0

Mis à jour10 avril 2026 à 21:33

Workflow for reducing image size and improving security of Docker containers.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Source

pedrol-cmd

pedrol-cmd/brain-drin

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Métiers associésSOC

Basé sur la classification professionnelle SOC

Administrateurs de réseaux et de systèmes informatiquesProfessions informatiques et mathématiques·SOC 15-1244

SKILL.md

readonly

name	drin-docker-image-hardener
description	Workflow for reducing image size and improving security of Docker containers.
status	production

Docker Image Hardener

Purpose

To reduce the attack surface and deployment time by creating minimal, secure images.

Checkpoints

Base Image: Use alpine or distroless where possible.
Multi-Stage: Build in one stage, copy only artifacts to the final stage.
Permissions: Run as a non-root user.
Hardening: Remove unnecessary shells, packages, and ssh keys.
Layers: Minimize layer count by grouping RUN commands.

Rules

Never use sudo inside a container.
Explicitly define the USER in the Dockerfile.
No secrets in the image layers.

Plus depuis ce dépôt

même dépôt

drin-accessibility-audit-wcag

pedrol-cmd/brain-drin

Technical workflow for verifying compliance with WCAG 2.2 accessibility standards.

2026-04-109

drin-adversarial-security-review

pedrol-cmd/brain-drin

Specialist security audit workflow focused on bypasses, creative injections, and logical flaws.

2026-04-109

drin-agile-ceremony-moderator

pedrol-cmd/brain-drin

Procedural guide and automated facilitator for daily standups, sprint planning, and retrospectives.

2026-04-109

drin-api-documentation-sync

pedrol-cmd/brain-drin

Workflow for ensuring the documentation (OpenAPI/Swagger) always reflects reality.

2026-04-109

drin-api-economy-analyst

pedrol-cmd/brain-drin

Strategic workflow for analyzing and optimizing the business value and monetization of APIs.

2026-04-109

drin-api-endpoint-scaffold

pedrol-cmd/brain-drin

Rapid scaffolding for new API endpoints following project-specific standards.

2026-04-109

name	drin-docker-image-hardener
description	Workflow for reducing image size and improving security of Docker containers.
status	production

Docker Image Hardener

Purpose

To reduce the attack surface and deployment time by creating minimal, secure images.

Checkpoints

Base Image: Use alpine or distroless where possible.
Multi-Stage: Build in one stage, copy only artifacts to the final stage.
Permissions: Run as a non-root user.
Hardening: Remove unnecessary shells, packages, and ssh keys.
Layers: Minimize layer count by grouping RUN commands.

Rules

Never use sudo inside a container.
Explicitly define the USER in the Dockerfile.
No secrets in the image layers.