container-security-hardening
Enhances container security by hardening Docker images and runtime deployments with best practices for secure configurations and vulnerability scanning.
Install this skill
Security score
The container-security-hardening skill was audited on Jun 2, 2026 and we found 19 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 112 | ```dockerfile |
Template literal with variable interpolation in command context
| 261 | ```dockerfile |
Template literal with variable interpolation in command context
| 400 | ```yaml |
Template literal with variable interpolation in command context
| 582 | ```yaml |
Curl to non-GitHub URL
| 203 | RUN curl -H "Authorization: Bearer $TOKEN" https://api.example.com > config.json |
Curl to non-GitHub URL
| 459 | --health-cmd "curl -f http://localhost:3000/health || exit 1" \ |
Access to root home directory
| 268 | RUN --mount=type=cache,target=/root/.npm \ |
Access to .env file
| 241 | .env |
Access to .env file
| 242 | .env.* |
Access to .env file
| 950 | - [ ] `.dockerignore` excludes `.git`, `.env`, secrets, tests |
External URL reference
| 203 | RUN curl -H "Authorization: Bearer $TOKEN" https://api.example.com > config.json |
External URL reference
| 210 | https://api.example.com/config > config.json |
External URL reference
| 230 | CMD ["node", "-e", "require('http').get('http://localhost:3000/health', r => process.exit(r.statusCode === 200 ? 0 : 1))"] |
External URL reference
| 288 | CMD ["node", "-e", "require('http').get('http://localhost:3000/health', r => process.exit(r.statusCode===200?0:1))"] |
External URL reference
| 459 | --health-cmd "curl -f http://localhost:3000/health || exit 1" \ |
External URL reference
| 504 | test: ["CMD", "curl", "-f", "http://localhost:3000/health"] |
External URL reference
| 578 | --certificate-oidc-issuer="https://token.actions.githubusercontent.com" |
External URL reference
| 619 | --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \ |
External URL reference
| 662 | issuer: "https://token.actions.githubusercontent.com" |