The Agent Skills Directory

Security Context Implementation: The Kubernetes manifests utilize security contexts to enforce non-root execution and disable privilege escalation. This follows the principle of least privilege and reduces the potential footprint of a container if it were compromised.\n- Container Hardening Techniques: The skill promotes multi-stage Docker builds and minimal base images. These practices minimize the software included in production containers, thereby reducing the available attack surface and improving overall security posture.\n- Official Resource References: Builders and base images are sourced from official, well-known registries such as Google Container Registry and Docker Hub. This ensures that the components used for containerization come from trusted, authoritative sources.\n- Vulnerability Assessment Workflow: The instructions include steps for checking container images for known vulnerabilities in the Artifact Registry, which is a proactive measure for maintaining a secure software supply chain.

gke-app-onboarding