Agent skill · security · jeremylongshore
scanning-container-security
Execute use when you need to work with security and compliance.
Why this skill is useful
Adds executable scripts for vulnerability scanning and compliance checks that are not commonly known or documented.
What it needs
Requires grype, hadolint, jq, snyk, trivy installed locally. About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Scanning Container Security Overview Scan container images and Dockerfiles for vulnerabilities, misconfigurations, and compliance violations using Trivy, Grype, Snyk Container, and Hadolint. Analyze base images, OS packages, application dependencies, and runtime configurations to produce actionable security reports with remediation guidance. Prerequisites Container scanning tool installed: trivy, grype, snyk, or docker scout Dockerfile linter: hadolint for Dockerfile best practice validation Docker daemon running for local image scanning Access to the container images to scan (local, registry, or tar archive) jq for parsing JSON scan results Instructions 1. Identify target images for scanning: production images, base images, and CI-built images 2. Lint Dockerfiles with hadolint Dockerfile to catch misconfigurations before build (privileged instructions, pinned versions, shell best practices) 3. Scan built images for OS-level vulnerabilities: trivy image <image:tag> or grype <image:tag> 4. Scan for application dependency vulnerabilities: check language-specific packages (npm, pip, Maven, Go modules) embedded in the image 5. Check for secrets accidentally baked into image layers: trivy image --scanners secret <image:tag> 6. Evaluate image against CIS Docker Benchmark: verify non-root user, read-only filesystem capability, health checks defined 7. Generate a security report with severity classification (Critical, High, Medium, Low) and CVE identifiers 8. Produce remediation steps: upgrade base image, pin package versions, replace vulnerable dependencies 9. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/scanning-container-security--f20724