Container Security Scanner

The Container Scanner skill empowers developers to integrate security and quality checks directly into their containerization workflows. By wrapping Hadolint and Trivy, it provides a unified interface for linting Dockerfiles to ensure adherence to best practices and scanning container images for known vulnerabilities (CVEs). It is particularly useful during the development phase to catch misconfigurations, non-root user violations, and outdated packages before they reach production environments, ensuring a more secure and efficient deployment.

主な機能

ユースケース