claude

container-security

Container security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.

4 on GitHubby Diego Bodartv1.0.0MITupdated 1 month ago
/

Plugin container-security from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (2)

  • container-runtime-security

    Container runtime isolation reference: namespaces, Linux capabilities, seccomp, AppArmor, user namespace remapping, hardened docker run and Compose examples, and anti-patterns such as --privileged, Docker socket mounts, and --pid=host. Use when configuring how containers run.

  • dockerfile-hardening

    Secure Dockerfile patterns: base image hierarchy, multi-stage builds for Node.js and Go on distroless or scratch, BuildKit secret mounts, and non-root execution. Use when writing or reviewing a Dockerfile.

Slash commands (2)

  • /container-security:container-audit

    Audit Dockerfiles and Docker or Podman Compose files for security issues such as root users, unpinned images, secrets in layers, and excess privileges, with fixes.

  • /container-security:image-scan

    Scan a container image, tarball, or existing scanner report for vulnerabilities and misconfigurations, produce an SBOM, and prioritize the fixes.

Subagents (2)

  • container-hardener

    Use this agent when writing, reviewing, or hardening Dockerfiles, Compose files, or container runtime settings: base image choice, multi-stage builds, non-root users, BuildKit secret mounts, capability dropping, read-only filesystems, and image signing with Cosign. It produces hardened configuration

  • image-scanner

    Use this agent when assessing a built container image for vulnerabilities and supply chain risk: running or interpreting Trivy, Grype, Snyk Container, or Docker Scout results, generating CycloneDX or SPDX SBOMs, and prioritizing CVEs with EPSS and CISA KEV. It produces a triaged vulnerability report

View source on GitHub

More from HermeticOrmus/LibreSecOps-Claude-Code

All 33 plugins →

Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.

2 skills · 2 commands · 2 agents

4

Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.

2 skills · 2 commands · 2 agents

4

Compliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.

2 skills · 2 commands · 2 agents

4

Security-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.

2 skills · 2 commands · 2 agents

4

Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.

2 skills · 2 commands · 2 agents

4

Identity and access management: IAM architecture, SSO and MFA design, RBAC/ABAC/ReBAC access control models, authentication flow review, and access audits.

2 skills · 2 commands · 2 agents

4

Similar plugins

container

claude

Teaches Claude container's command surface and how it maps to Docker, Lima, Colima, and Podman on macOS

1 skill

apple/container 51,329

Agent skills for Azure SQL Developer, the Azure SQL Database engine running locally in a container. Teaches your agent to run the engine, connect, migrate, scaffold, build RAG, wire CI, and go local-to-cloud, using the real Private Preview image instead of the SQL Server image.

17 skills

anthropics/claude-plugins-official 47,076

Configure, run, and interpret HawkScan DAST results. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into prioritized fix tasks for your coding agent.

1 skill · hooks

anthropics/knowledge-work-plugins 35,601

Docker and container development — Dockerfile optimization, docker-compose orchestration, multi-stage builds, security hardening, and CI/CD container pipelines.

1 skill

alirezarezvani/claude-skills 29,725

DevOps, cloud, and deployment specialists - Kubernetes, Terraform, AWS, Azure, GCP, and SRE

VoltAgent/awesome-claude-code-subagents 26,513

Agent skills for creating BentoML projects, containerizing them, and deploying them to Kubernetes or EC2 with a fully open-source stack

5 skills

bentoml/BentoML 8,940

Maintain container-security?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins33 plugins