# Docker Image Vulnerability Triage

> Runs Trivy against a Docker image and produces a prioritized CVE list grouped by severity with fix availability. Filters out CVEs with no available fix. Outputs a structured report suitable for Jira or GitHub Issues.

- Skill: `agentskillexchange/docker-image-vulnerability-triage` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/docker-image-vulnerability-triage`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/docker-image-vulnerability-triage/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/docker-image-vulnerability-triage

---


# Docker Image Vulnerability Triage

Runs Trivy against a Docker image and produces a prioritized CVE list grouped by severity with fix availability. Filters out CVEs with no available fix. Outputs a structured report suitable for Jira or GitHub Issues.

## Installation

Use the upstream install or setup path that matches your environment:
- Docker Engine releases are tagged with a **docker-** prefix (e.g. docker-v29.0.0 for Docker Engine 29.0.0).

Requirements and caveats from upstream:
- Moby is an open-source project created by Docker to enable and accelerate software containerization.
- ## Relationship with Docker
- The components and tools in the Moby Project are initially the open source components that Docker and the community have built for the Docker Project.

- Source: https://github.com/moby/moby
- Extracted from upstream docs: https://raw.githubusercontent.com/moby/moby/HEAD/README.md

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/docker-image-vulnerability-triage/)