drin-docker-image-hardener

Estrelas9

Forks0

Atualizado10 de abril de 2026 às 21:33

Workflow for reducing image size and improving security of Docker containers.

Instalação

Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.

Fonte

pedrol-cmd

pedrol-cmd/brain-drin

Abrir repositório GitHub Ver repositórios do creator

Download

Ocupações relacionadasSOC

Baseado na classificação ocupacional SOC

Administradores de redes e sistemas de computadorInformática e Matemática·SOC 15-1244

SKILL.md

readonly

name	drin-docker-image-hardener
description	Workflow for reducing image size and improving security of Docker containers.
status	production

Docker Image Hardener

Purpose

To reduce the attack surface and deployment time by creating minimal, secure images.

Checkpoints

Base Image: Use alpine or distroless where possible.
Multi-Stage: Build in one stage, copy only artifacts to the final stage.
Permissions: Run as a non-root user.
Hardening: Remove unnecessary shells, packages, and ssh keys.
Layers: Minimize layer count by grouping RUN commands.

Rules

Never use sudo inside a container.
Explicitly define the USER in the Dockerfile.
No secrets in the image layers.

Mais deste repositório

mesmo repositório

drin-accessibility-audit-wcag

pedrol-cmd/brain-drin

Technical workflow for verifying compliance with WCAG 2.2 accessibility standards.

2026-04-109

drin-adversarial-security-review

pedrol-cmd/brain-drin

Specialist security audit workflow focused on bypasses, creative injections, and logical flaws.

2026-04-109

drin-agile-ceremony-moderator

pedrol-cmd/brain-drin

Procedural guide and automated facilitator for daily standups, sprint planning, and retrospectives.

2026-04-109

drin-api-documentation-sync

pedrol-cmd/brain-drin

Workflow for ensuring the documentation (OpenAPI/Swagger) always reflects reality.

2026-04-109

drin-api-economy-analyst

pedrol-cmd/brain-drin

Strategic workflow for analyzing and optimizing the business value and monetization of APIs.

2026-04-109

drin-api-endpoint-scaffold

pedrol-cmd/brain-drin

Rapid scaffolding for new API endpoints following project-specific standards.

2026-04-109

name	drin-docker-image-hardener
description	Workflow for reducing image size and improving security of Docker containers.
status	production

Docker Image Hardener

Purpose

To reduce the attack surface and deployment time by creating minimal, secure images.

Checkpoints

Base Image: Use alpine or distroless where possible.
Multi-Stage: Build in one stage, copy only artifacts to the final stage.
Permissions: Run as a non-root user.
Hardening: Remove unnecessary shells, packages, and ssh keys.
Layers: Minimize layer count by grouping RUN commands.

Rules

Never use sudo inside a container.
Explicitly define the USER in the Dockerfile.
No secrets in the image layers.