The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill includes hardcoded default credentials within its Docker Compose development configuration templates. Evidence: 'POSTGRES_PASSWORD=postgres' and 'DATABASE_URL=postgresql://postgres:postgres@db:5432/app' are used as example placeholders.
[EXTERNAL_DOWNLOADS]: The skill references base images and CI/CD actions from official and well-known technology organizations. Evidence: Uses official Docker images such as 'python:3.12-slim' and 'node:20-alpine'. Evidence: Utilizes official GitHub Actions including 'actions/checkout' and 'docker/build-push-action'.
[SAFE]: The skill promotes several critical security hardening techniques for containerized environments. Evidence: Includes instructions for creating and switching to non-root users ('USER appuser'). Evidence: Recommends using multi-stage builds to reduce image size and minimize the attack surface. Evidence: Suggests the use of security scanning tools like 'docker scout', 'trivy', and 'snyk'. Evidence: Demonstrates how to limit container privileges through 'cap_drop' and 'no-new-privileges' settings.

docker-deployment