drin-docker-image-hardener

星标9

分支0

更新时间2026年4月10日 21:33

Workflow for reducing image size and improving security of Docker containers.

安装

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

来源

pedrol-cmd

pedrol-cmd/brain-drin

打开 GitHub 仓库查看创作者相关仓库

下载

Docker Image Hardener

Purpose

To reduce the attack surface and deployment time by creating minimal, secure images.

Checkpoints

Base Image: Use alpine or distroless where possible.
Multi-Stage: Build in one stage, copy only artifacts to the final stage.
Permissions: Run as a non-root user.
Hardening: Remove unnecessary shells, packages, and ssh keys.
Layers: Minimize layer count by grouping RUN commands.

Rules

Never use sudo inside a container.
Explicitly define the USER in the Dockerfile.
No secrets in the image layers.

同仓库更多 Skills

同仓库

drin-accessibility-audit-wcag

pedrol-cmd/brain-drin

Technical workflow for verifying compliance with WCAG 2.2 accessibility standards.

2026-04-109

drin-adversarial-security-review

pedrol-cmd/brain-drin

Specialist security audit workflow focused on bypasses, creative injections, and logical flaws.

2026-04-109

drin-agile-ceremony-moderator

pedrol-cmd/brain-drin

Procedural guide and automated facilitator for daily standups, sprint planning, and retrospectives.

2026-04-109

drin-api-documentation-sync

pedrol-cmd/brain-drin

Workflow for ensuring the documentation (OpenAPI/Swagger) always reflects reality.

2026-04-109

drin-api-economy-analyst

pedrol-cmd/brain-drin

Strategic workflow for analyzing and optimizing the business value and monetization of APIs.

2026-04-109

drin-api-endpoint-scaffold

pedrol-cmd/brain-drin

Rapid scaffolding for new API endpoints following project-specific standards.

2026-04-109

name	drin-docker-image-hardener
description	Workflow for reducing image size and improving security of Docker containers.
status	production

Docker Image Hardener

Purpose

To reduce the attack surface and deployment time by creating minimal, secure images.

Checkpoints

Base Image: Use alpine or distroless where possible.
Multi-Stage: Build in one stage, copy only artifacts to the final stage.
Permissions: Run as a non-root user.
Hardening: Remove unnecessary shells, packages, and ssh keys.
Layers: Minimize layer count by grouping RUN commands.

Rules

Never use sudo inside a container.
Explicitly define the USER in the Dockerfile.
No secrets in the image layers.