The Agent Skills Directory

[SAFE]: The skill provides comprehensive deployment documentation and templates for Litestar applications using industry-standard tools.
[SAFE]: Promotes high-security container practices by recommending Google's distroless images (gcr.io/distroless/cc-debian12) for production environments, which reduces the attack surface by excluding shells, package managers, and unnecessary binaries.
[SAFE]: Explicitly configures containers to run as a non-root user (UID 65532) in both Dockerfiles and Kubernetes manifests, aligning with the principle of least privilege.
[SAFE]: Includes robust Kubernetes SecurityContext definitions that drop all Linux capabilities (capabilities: drop: ["ALL"]), set runAsNonRoot: true, and allowPrivilegeEscalation: false.
[SAFE]: Recommends secure secret management practices, such as using environment variables, .env files with restricted permissions (chmod 600), and native cloud secret integration (gcloud run deploy --set-secrets) instead of hardcoding credentials.
[SAFE]: Uses multi-stage Docker builds to ensure that build-time dependencies (like build-essential, git, and curl) and source code caches are not included in the final production image.
[SAFE]: Integrates tini as an init process in container entrypoints to ensure correct signal forwarding and zombie process reaping, improving container reliability and graceful shutdown.

litestar-deployment