container-security
Use when the user asks about container image vulnerabilities, scanning Docker images, generating SBOMs, signing images with cosign, hardening container images, or adding security checks in CI/CD. Performs scan -> triage -> remediate/suppress -> re-scan -> sign -> verify workflow using Trivy/Grype/syft/cosign.
Pinned to revision 1bca4bbdf059, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/container-security/SKILL.md
- skills/container-security/assets/security-scan-workflow.yml
- skills/container-security/assets/trivy-config.yaml
- skills/container-security/references/hardening-guide.md
- skills/container-security/references/image-scanning.md
- skills/container-security/references/security-operations.md
- skills/container-security/references/supply-chain-security.md
Every link opens the file at its source, pinned to the revision this page describes.