Container & Kubernetes Security Review

Overview

This skill performs a structured security review of container images and Kubernetes deployments against three industry-standard frameworks:

• CIS Docker Benchmark v1.6.0 -- 7 sections covering Docker daemon, host, images, containers, runtime, security operations, and Docker Swarm configuration.
• CIS Kubernetes Benchmark v1.9.0 -- 5 sections covering control plane, etcd, control plane configuration, worker nodes, and policies.
• NIST SP 800-190 (Application Container Security Guide) -- Countermeasures for image, registry, orchestrator, container, and host OS risks.

The review covers Dockerfiles, Kubernetes manifests, Helm charts, and supporting configurations. Each finding is mapped to specific CIS recommendation IDs or NIST SP 800-190 countermeasure categories.

When to Use

If a target is provided via arguments, focus the review on: $ARGUMENTS