Results for “container-image”
21 skills
chimeranext container-security
Implements container security with image scanning, runtime protection, image signing, and security policies using tools like Falco, Trivy, and Notary.
4 · bundle
mukul975 securing-container-registry-images
Scan container images for vulnerabilities with Trivy and Grype, generate SBOMs, sign images with Cosign and Sigstore, configure registry access controls, and enforce security gates in CI/CD pipelines.
24.6k · bundle
snoodleboot-io container-security-hardening
A container image is an attack surface you chose.
2
mukul975 scanning-container-images-with-grype
Scan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.
24.6k · bundle
mukul975 performing-container-image-hardening
Harden container images by minimizing attack surface, removing unnecessary packages, implementing multi-stage builds, configuring non-root users, and applying CIS Docker Benchmark recommendations.
24.6k · bundle
mukul975 implementing-container-image-minimal-base-with-distroless
Reduce container attack surface by building application images on Google distroless base images that contain only the application runtime with no shell, package manager, or unnecessary OS utilities.
24.6k · bundle
More results
mukul975 analyzing-docker-container-forensics
Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and evidence.
24.6k · bundle
mukul975 implementing-image-provenance-verification-with-cosign
Sign and verify container image provenance using Sigstore Cosign with keyless OIDC-based signing, attestations, and Kubernetes admission enforcement.
24.6k · bundle
cloudthinker-ai analyzing-aqua
Analyzes container security posture, image assurance, compliance, and runtime alerts on the Aqua Security platform via its API.
7
mukul975 scanning-iac-and-images-with-trivy
Scan container images, IaC, and SBOMs for vulnerabilities and misconfigurations in CI/CD with Trivy.
24.6k · bundle
mukul975 detecting-container-drift-at-runtime
Detect unauthorized modifications to running containers by monitoring for binary execution drift, file system changes, and configuration deviations from the original container image.
24.6k · bundle
mukul975 securing-container-registry-with-harbor
Configure and manage Harbor container registry with security features including vulnerability scanning, image signing, RBAC, content trust, and audit logging.
24.6k · bundle
mukul975 scanning-containers-with-trivy-in-cicd
Integrate Trivy vulnerability scanning into CI/CD pipelines to detect container image CVEs, Dockerfile misconfigurations, and enforce severity-based quality gates.
24.6k · bundle
mukul975 performing-container-security-scanning-with-trivy
Scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.
24.6k · bundle
mukul975 implementing-gcp-binary-authorization
Enforce deploy-time security controls that ensure only trusted, attested container images are deployed to Google Kubernetes Engine and Cloud Run.
24.6k · bundle
mukul975 implementing-supply-chain-security-with-in-toto
Verify container image integrity across CI/CD pipelines using the in-toto framework to generate and check cryptographically signed attestations.
24.6k · bundle
mukul975 hardening-docker-containers-for-production
Apply CIS Docker Benchmark v1.8.0 security best practices to harden Docker containers for production, covering daemon configuration, image building, runtime controls, and auditing.
24.6k · bundle
mukul975 implementing-aqua-security-for-container-scanning
Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.
24.6k · bundle
zhaoxuya520 supply-chain-security
Assess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.
12.8k · bundle
mukul975 generating-and-analyzing-sboms
Generate CycloneDX and SPDX SBOMs from container images and filesystems, scan them for vulnerabilities with Grype, and sign attestations with Cosign for supply-chain trust.
24.6k · bundle
mukul975 scanning-docker-images-with-trivy
Scan Docker images for vulnerabilities, misconfigurations, secrets, and license violations using Trivy, with CI/CD integration and policy enforcement.
24.6k · bundle