Which files does the Docker Secrets Scanner analyze?

The skill scans Dockerfiles, docker-compose.yml, .env files, and entrypoint.sh scripts for potential security leaks.

Why is finding secrets in a Dockerfile important?

Secrets hardcoded in a Dockerfile persist in the image layers even if the variable is removed in a later step, making them accessible via image inspection.

Does this skill help with rotating compromised secrets?

Yes, it provides a verification checklist that includes rotating secrets and cleaning Git history if a secret was previously committed.

How does it handle false positives like variable references?

It specifically excludes variable references like ${DB_PASSWORD}, empty placeholders, and commented-out lines to ensure high-signal security alerts.

What remediation methods does it suggest?

It suggests industry-standard alternatives such as Docker Compose Secrets, environment files, and BuildKit secret mounts.

Docker Secrets Scanner

Name: Docker Secrets Scanner
Author: dykyi-roman

bydykyi-roman

•

보안 및 테스팅

Scans Docker configuration files to identify and remediate hardcoded secrets, passwords, and sensitive credentials.

The Docker Secrets Scanner skill enables Claude to perform automated security audits on containerized environments by analyzing Dockerfiles, Compose files, and environment variables for exposed sensitive data. It detects critical vulnerabilities such as hardcoded passwords, leaked API keys, and insecurely embedded private keys across multiple file types. Beyond simple detection, it provides severity classification and actionable remediation patterns, helping developers transition from insecure hardcoding to production-grade practices like Docker Secrets and BuildKit mounts.

주요 기능

01Detection of high-risk patterns like hardcoded passwords, SSH keys, and connection strings

02Automatic severity classification from Critical to Medium risk levels

03False positive filtering for environment variable references and empty placeholders

04Actionable remediation templates for Docker Secrets and BuildKit integration

05Multi-file scanning including Dockerfile, Compose, .env, and entrypoint scripts

0645 GitHub stars

사용 사례

01Refactoring legacy Docker configurations to follow security best practices

02Pre-deployment security audits for containerized applications

03Validating local development environments before pushing to version control

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add dykyi-roman/awesome-claude-code check-docker-secrets

For use in Claude.ai and ChatGPT

Download Skill