docker-container-security

@goldenwing-360 · 收录于 1 周前

Run containers with a defensive baseline that survives production. Covers non-root users, read-only filesystems, dropped Linux capabilities, secret mounts instead of build-time bake-in, image scanning with trivy, distroless and minimal base images, and the Docker-bypasses-UFW firewall pitfall. Invoke when adding Docker to a VPS with UFW, writing a new Dockerfile, or pushing an image to a public registry.

场景容器部署安全加固镜像推送前检查

适合你，如果需要在生产环境中运行安全的 Docker 容器

/ 下载安装

https://github.com/GoldenWing-360/claude-security-skills/tree/main/docker-container-security ↗

/ 通过 npx 安装 校验哈希

npx oh-my-skill add goldenwing-360/claude-security-skills/docker-container-security

/ 通过 bash 安装

curl -fsSL https://oh-my-skill.com/install.sh | bash -s -- goldenwing-360/claude-security-skills/docker-container-security

/ 已经装过?验证本机副本,不用重装

npx oh-my-skill verify goldenwing-360/claude-security-skills/docker-container-security

安装目标可用 --agent / --scope 或 --to 明确指定;省略时只会在唯一已存在的 agent 目录上自动选择,零命中或多命中会停止并提示。content_hash 缺失或不一致均拒装。

13GitHub stars

~1.9K上下文体积 · 单文件

索引托管

登录即可评论;带「已验证安装」的,是发布者名下有本店的安装或持有记录。

…