Results for “container”
21 skills
mukul975 scanning-containers-with-trivy-in-cicd
Integrate Trivy vulnerability scanning into CI/CD pipelines to detect container image CVEs, Dockerfile misconfigurations, and enforce severity-based quality gates.
24.6k · bundle
mukul975 implementing-aqua-security-for-container-scanning
Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.
24.6k · bundle
mukul975 securing-container-registry-images
Scan container images for vulnerabilities with Trivy and Grype, generate SBOMs, sign images with Cosign and Sigstore, configure registry access controls, and enforce security gates in CI/CD pipelines.
24.6k · bundle
mukul975 performing-container-security-scanning-with-trivy
Scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.
24.6k · bundle
oyi77 docker
Guides containerizing apps with Docker Compose, optimizing Dockerfiles, and deploying to Kubernetes, with a focus on turning these tasks into a paid service.
10
mukul975 scanning-iac-and-images-with-trivy
Scan container images, IaC, and SBOMs for vulnerabilities and misconfigurations in CI/CD with Trivy.
24.6k · bundle
More results
mukul975 implementing-image-provenance-verification-with-cosign
Sign and verify container image provenance using Sigstore Cosign with keyless OIDC-based signing, attestations, and Kubernetes admission enforcement.
24.6k · bundle
zhaoxuya520 supply-chain-security
Assess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.
12.8k · bundle
mukul975 implementing-gcp-binary-authorization
Enforce deploy-time security controls that ensure only trusted, attested container images are deployed to Google Kubernetes Engine and Cloud Run.
24.6k · bundle
mukul975 building-devsecops-pipeline-with-gitlab-ci
Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.
24.6k · bundle
zhaoxuya520 competition-agent-cloud
Specialized CTF sandbox skill for analyzing prompt-to-tool chains, deployment drift, and supply-chain provenance in cloud, container, and CI/CD environments.
12.8k · bundle
mukul975 generating-and-analyzing-sboms
Generate CycloneDX and SPDX SBOMs from container images and filesystems, scan them for vulnerabilities with Grype, and sign attestations with Cosign for supply-chain trust.
24.6k · bundle
mukul975 implementing-supply-chain-security-with-in-toto
Verify container image integrity across CI/CD pipelines using the in-toto framework to generate and check cryptographically signed attestations.
24.6k · bundle
luokai0 deploy
Guides reliable application deployment with CI/CD pipelines, zero-downtime strategies, rollback plans, and post-deploy monitoring.
10 · bundle
oyi77 drone-ci
Configure container-native CI/CD pipelines with Drone, including YAML pipeline definitions, plugins, secrets, and multi-machine builds.
10
tools-only 165-json-bf546d38
Coordinates multi-service releases, manages container registries, and sets up CI/CD pipelines across platforms.
7 · bundle
affaan-m deployment-patterns
Provides deployment strategies, CI/CD pipeline patterns, Docker containerization best practices, health checks, and production readiness guidance for web applications.
226k
mukul975 scanning-docker-images-with-trivy
Scan Docker images for vulnerabilities, misconfigurations, secrets, and license violations using Trivy, with CI/CD integration and policy enforcement.
24.6k · bundle
mukul975 implementing-code-signing-for-artifacts
Sign build artifacts (binaries, packages, containers) with GPG, Sigstore, and platform-specific tools to ensure integrity and authenticity throughout the software supply chain.
24.6k · bundle
tinh2 devops
Audits deployment readiness across CI/CD, containers, monitoring, IaC, secrets, CDN, and DNS, scoring each area and identifying critical gaps, with optional auto-fix via chained sub-skills.
13
mukul975 implementing-sigstore-for-software-signing
Signs and verifies software artifacts using Sigstore's keyless signing, Rekor transparency log, and Fulcio certificate authority, integrating into CI/CD pipelines and Kubernetes admission controls.
24.6k · bundle