Skill UI

A comprehensive guide featuring best practices and patterns for building robust GitLab CI/CD pipelines. Covers multi-stage deployments, containerization (Docker), infrastructure as code (Terraform), security scanning, caching strategies, and advanced GitOps workflows for automated testing and deployment to Kubernetes.

A comprehensive guide for deploying complex integrations to production cloud environments (GCP, Kubernetes). This skill covers best practices including creating multi-stage Dockerfiles, implementing robust health and readiness checks, and utilizing cloud tools like gcloud and kubectl for seamless, secure deployment with secret management.

A comprehensive guide for digital forensics professionals to investigate compromised Docker containers. It covers best practices for preserving container state, analyzing image layers, reviewing runtime logs, and examining host system artifacts to identify evidence of malicious activity, container escapes, or misconfigurations.

This skill provides methods and rules for detecting advanced container escape attempts, where an adversary attempts to break out of container isolation. Detection relies on monitoring critical system activities such as namespace manipulation, capability abuse (e.g., CAP_SYS_ADMIN), kernel exploits, and access to sensitive host paths. Tools like Falco, Sysdig, and eBPF are leveraged to monitor syscalls and process behavior in real-time, crucial for security incident response and threat hunting in containerized environments like Kubernetes or Docker.

Utilizes Google Distroless images and multi-stage Docker builds to drastically reduce container attack surface. By eliminating unnecessary OS components like shells, package managers, and core utilities, this technique is essential for hardening container security, meeting compliance requirements, or mitigating risks associated with bloated base images.

This tool runs the open-source Docker Bench for Security, auditing container host configurations, Docker daemon settings, and runtime security controls against the CIS Benchmark. It generates a detailed pass/fail/warn report, helping security teams validate compliance, harden environments, and perform regular security audits.

This guide provides comprehensive best practices for creating optimized, secure, and efficient multi-stage Dockerfiles. Learn how to separate build environments (builder stage) from minimal runtime environments, significantly reducing image size and attack surface. Topics covered include layer caching optimization, security hardening (non-root users), and using minimal base images for reproducible builds.

This skill provides comprehensive guidance for deploying and managing GPU-accelerated AI inference services on CoreWeave Kubernetes (CKS). It covers best practices including containerization using NVIDIA CUDA base images, configuring specific GPU resource limits (A100/H100), setting up robust health checks, and executing controlled rolling updates. Ideal for managing multi-model inference and scaling demanding AI workloads in a cloud environment.

This skill provides advanced integration for deploying applications on Fly.io, focusing on edge computing architectures. It covers building production-ready Docker images, configuring `fly.toml` for services and health checks, and executing sophisticated deployment strategies like blue-green and canary releases. It ensures reliable, scalable deployment across multiple regions, including automated rollbacks and micro-VM optimization.

Provides a comprehensive, production-ready deployment solution for OneNote integrations in containerized environments. This skill addresses critical issues like MSAL token persistence (supporting both file and Redis caches), implementing deep health/readiness checks that validate actual Graph API connectivity, and managing graceful shutdowns. Ideal for containerizing OneNote services for robust, scalable production use with Docker and Kubernetes.

This guide provides comprehensive best practices for configuring Palantir Foundry integrations across development, staging, and production environments. It details how to manage environment-specific credentials, hostnames, and scope policies using structured Python code and platform-specific deployment manifests (Docker Compose, Kubernetes, gcloud). Use this skill when implementing resilient, multi-tier SaaS deployments that require strict credential and configuration separation.

A powerful, kubectl/docker-style CLI tool designed to manage and submit distributed computing jobs on the Qizhi (启智) platform. Use it for tasks like logging in, checking resource availability, discovering workspaces, and submitting complex GPU, CPU, or batch jobs efficiently.