Automates the migration of Dockerfile FROM statements to secure, minimal Chainguard container images.
This skill provides a comprehensive framework for converting standard upstream container images to their hardened Chainguard equivalents within Claude Code. It automates complex tag mapping rules, manages organization namespaces at cgr.dev, and handles specific logic for multi-stage builds—such as distinguishing between development and runtime environments. By integrating with specialized MCP servers like dfc and ai-docs, it ensures that your containerized applications benefit from reduced attack surfaces and simplified vulnerability management with minimal manual intervention.
Características Principales
01Integration with dfc and ai-docs MCP servers for real-time image lookups
02Context-aware -dev suffix application for stages requiring build tools
035 GitHub stars
04Intelligent tag mapping from semantic versions to Chainguard major.minor formats
05Automated Dockerfile FROM statement conversion and registry rewriting
06Support for FIPS-compliant image variants and static/distroless runtimes
Casos de Uso
01Hardening existing application Dockerfiles to eliminate CVEs and reduce image size
02Standardizing container image tags and registries across a development team's infrastructure
03Migrating enterprise container workloads to private Chainguard organization namespaces
