scanning-container-security

Execute use when you need to work with security and compliance. This skill provides security scanning and vulnerability detection with comprehensive guidance and automation. Trigger with phrases like "scan for vulnerabilities", "implement security controls", or "audit security".

Ir para a instalação

Repositório: jeremylongshore/claude-code-plugins-plus-skills
Última atividade na origem: 17 de julho de 2026 às 22:18
Idioma detectado do SKILL.md: inglês
Estrelas: 2.604
Forks: 378

Opções de instalação

Por padrão, está selecionado o prompt que primeiro revisa a origem. Você pode mudar para um comando direto ou baixar uma cópia local.

Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.

Um comando direto ignora o prompt de revisão. Verifique a origem antes de executá-lo.

npx skills add https://github.com/jeremylongshore/claude-code-plugins-plus-skills --skill scanning-container-security

O comando permanece em uma só linha. Role horizontalmente para revisá-lo antes de copiar.

Prefere uma cópia local? Baixe os arquivos disponíveis atualmente no SkillsMP.

Revise os arquivos de origem

Leia o SKILL.md e os arquivos complementares exibidos pelo SkillsMP antes de decidir se vai instalar.

Explorador de arquivos

6 arquivos

SKILL.md

Instruções da origem · Visualização somente leitura

Voltar à pesquisa Voltar à instalação

clerk-core-workflow-a

Implement user sign-up and sign-in flows with Clerk. Use when building authentication UI, customizing sign-in experience, or implementing OAuth social login. Trigger with phrases like "clerk sign-in", "clerk sign-up", "clerk login flow", "clerk OAuth", "clerk social login".

2026-07-23

clerk-core-workflow-b

Implement session management and middleware with Clerk. Use when managing user sessions, configuring route protection, or implementing token refresh and custom JWT templates. Trigger with phrases like "clerk session", "clerk middleware", "clerk route protection", "clerk token", "clerk JWT".

2026-07-23

clerk-enterprise-rbac

Configure enterprise SSO, role-based access control, and organization management. Use when implementing SSO integration, configuring role-based permissions, or setting up organization-level controls. Trigger with phrases like "clerk SSO", "clerk RBAC", "clerk enterprise", "clerk roles", "clerk permissions", "clerk organizations".

2026-07-23

Ver todas deste repositório

Scanning Container Security

Overview

Scan container images and Dockerfiles for vulnerabilities, misconfigurations, and compliance violations using Trivy, Grype, Snyk Container, and Hadolint. Analyze base images, OS packages, application dependencies, and runtime configurations to produce actionable security reports with remediation guidance.

Prerequisites

Container scanning tool installed: trivy, grype, snyk, or docker scout

Dockerfile linter: hadolint for Dockerfile best practice validation

Docker daemon running for local image scanning

Access to the container images to scan (local, registry, or tar archive)

jq for parsing JSON scan results

Instructions

Identify target images for scanning: production images, base images, and CI-built images

Lint Dockerfiles with hadolint Dockerfile to catch misconfigurations before build (privileged instructions, pinned versions, shell best practices)

Scan built images for OS-level vulnerabilities: trivy image <image:tag> or grype <image:tag>

Scan for application dependency vulnerabilities: check language-specific packages (npm, pip, Maven, Go modules) embedded in the image

Check for secrets accidentally baked into image layers: trivy image --scanners secret <image:tag>

Evaluate image against CIS Docker Benchmark: verify non-root user, read-only filesystem capability, health checks defined

Generate a security report with severity classification (Critical, High, Medium, Low) and CVE identifiers

Produce remediation steps: upgrade base image, pin package versions, replace vulnerable dependencies

Integrate scanning into CI/CD pipeline: fail builds on Critical/High vulnerabilities, generate SARIF output for GitHub Security tab

Output

Vulnerability scan report in JSON, table, or SARIF format

Hadolint report with Dockerfile improvement recommendations

Remediation Dockerfile patches (updated base image, pinned package versions)

CI/CD pipeline step configuration for automated image scanning

Security policy document defining acceptable risk thresholds

Error Handling

Error

Cause

Solution

trivy: unable to pull image

Image not found locally or registry auth failure

Pull image first with docker pull or configure registry credentials

CRITICAL vulnerability found but no fix available

Upstream package has no patch yet

Document as accepted risk, use --ignore-unfixed flag, or switch to an alternative base image

hadolint: DL3008 pin versions in apt-get install

Packages installed without version pinning

Add version pins (e.g., apt-get install nginx=1.24.0-1) or use --no-install-recommends

Scan timeout on large image

Image has many layers or large filesystem

Use --timeout 15m flag; scan a specific layer or use --skip-dirs to exclude test data

False positive CVE

Scanner database maps CVE to a package not actually exploitable

Add to .trivyignore or Grype ignore file with justification comment

Examples

"Scan all production Docker images for Critical and High CVEs, generate a report, and create Jira tickets for each finding."

"Lint the Dockerfile for best practices: ensure multi-stage build, non-root USER, no ADD for remote URLs, and pinned base image digest."

"Set up a GitHub Actions step that runs Trivy on every PR, fails on Critical vulnerabilities, and uploads results to the Security tab via SARIF."

Resources

name	scanning-container-security
description	Execute use when you need to work with security and compliance. This skill provides security scanning and vulnerability detection with comprehensive guidance and automation. Trigger with phrases like "scan for vulnerabilities", "implement security controls", or "audit security".
allowed-tools	Read, Write, Edit, Grep, Glob, Bash(docker:), Bash(kubectl:)
version	1.27.0
author	Jeremy Longshore <jeremy@intentsolutions.io>
license	MIT
tags	["devops","security","compliance","audit"]
compatibility	Designed for Claude Code, also compatible with Codex and OpenClaw

name	scanning-container-security
description	Execute use when you need to work with security and compliance. This skill provides security scanning and vulnerability detection with comprehensive guidance and automation. Trigger with phrases like "scan for vulnerabilities", "implement security controls", or "audit security".
allowed-tools	Read, Write, Edit, Grep, Glob, Bash(docker:), Bash(kubectl:)
version	1.27.0
author	Jeremy Longshore <jeremy@intentsolutions.io>
license	MIT
tags	["devops","security","compliance","audit"]
compatibility	Designed for Claude Code, also compatible with Codex and OpenClaw

scanning-container-security

Informações da origem

Opções de instalação

Revise os arquivos de origem

Mais deste repositório

Mais deste repositório