docker-patterns
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive Docker patterns focusing on security best practices including image pinning and multi-stage builds.
- [SAFE]: Instructions explicitly advocate for running containers as non-root users using the
USERdirective in Dockerfiles. - [SAFE]: Secret management guidance correctly warns against hardcoding credentials and demonstrates safe practices using
.envfiles (with.dockerignore) and Docker secrets. - [SAFE]: The skill recommends Docker Compose security configurations such as
no-new-privileges:true,read_only: true, and `cap_drop: - ALL` to implement least privilege.
- [SAFE]: Networking patterns focus on service isolation and limiting port exposure to
127.0.0.1for local development. - [SAFE]: Build patterns utilize multi-stage builds to ensure production images are minimal and do not contain build-time dependencies or source code, reducing the overall attack surface.
Audit Metadata