The Agent Skills Directory

[SAFE]: The skill provides instructional content for Docker best practices with a strong focus on security, including non-root user configurations, multi-stage builds, and distroless runtime environments.
[SAFE]: Recommended security scanning tools (Trivy, Grype, Docker Scout) are well-known industry standards from reputable organizations.
[SAFE]: The provided .dockerignore template correctly identifies sensitive files like .env and .git to prevent accidental inclusion of credentials in image layers.
[SAFE]: Hardcoded credentials in the Docker Compose example are clearly intended for local development environments (postgres:postgres) and follow standard documentation patterns.
[SAFE]: The skill demonstrates secure handling of build-time secrets using BuildKit's secret and SSH mount features.

docker-containerization