SECURITY2 Multi-file Components

Docker Container Image Hardening & Distroless Builds

Minimizes container attack surfaces by removing unnecessary package managers, shells, and root privileges.

Author: TRIHEX Architecture Lab

•

License: MIT

•

Version: 2.1.0

Inert Code Verified · Heuristic Static Security ScannerHeuristic Scanner: LOW Risk

Heuristic static security scanner audited 2 files (2520 bytes). External code. Review before execution.

v2.1.0

Skill Files (2)

Compatible Runtimes

AntigravityClaude CodeCursor

SKILL.md·markdown

# Docker Container Image Hardening & Distroless Builds

Non-root users, read-only root filesystems, distroless base images, and Trivy CVE scanning.

## Core Invariants & Rules
1. Always specify USER node or USER nonroot. Avoid running processes as root.
2. Verify input validation and security boundaries on all executions.
3. Keep configurations modular, typed, and auditable.

## Operational Workflow
1. Analyze requirements against existing codebase patterns.
2. Apply standardized implementation templates.
3. Execute verification suites before deployment.