The Agent Skills Directory

[SAFE]: The skill provides educational content and configuration templates for Docker CI/CD automation. It consistently emphasizes security best practices, such as rotating registry tokens, scanning images for vulnerabilities with Docker Scout, and avoiding hardcoded credentials.
[EXTERNAL_DOWNLOADS]: The skill references several official GitHub Actions from well-known sources, including actions/checkout, docker/setup-buildx-action, docker/login-action, docker/metadata-action, docker/setup-qemu-action, and docker/build-push-action. These are standard tools for CI/CD workflows and are sourced from established, trusted repositories.
[CREDENTIALS_UNSAFE]: The provided examples correctly utilize environment variables and secret injection (e.g., ${{ secrets.DOCKER_PASSWORD }} in GitHub Actions and withDockerRegistry in Jenkins) to handle sensitive data, rather than hardcoding credentials into the scripts.

docker-cicd