Skill UI

An open-source tool based on the CIS Docker Benchmark. It systematically audits critical security aspects of Docker deployments, including host configuration, daemon settings, and container runtime. It generates a detailed compliance report (pass/fail/warn) to ensure best practices and security compliance in production environments.

Grype is an open-source vulnerability scanner from Anchore. It inspects container images, filesystems, and SBOMs for known CVEs. It leverages Syft-generated SBOMs to match packages against multiple vulnerability databases (NVD, GitHub Advisories). Use it for security assessments, auditing, and integrating into CI/CD pipelines to enforce vulnerability standards and manage supply chain risks.

Use Trivy to automate comprehensive vulnerability detection (CVEs, misconfigurations) in Docker container images within CI/CD pipelines. This skill guides users on establishing robust quality gates—such as integrating into GitHub Actions or GitLab CI—to ensure that only secure images are pushed to production registries, covering OS packages, dependencies, and Dockerfile best practices.

Trivy is a comprehensive open-source vulnerability scanner used for detecting vulnerabilities, misconfigurations, secrets, and license violations across OS packages, language dependencies, and container images. It integrates seamlessly into CI/CD pipelines for robust security testing and compliance.

This skill provides a comprehensive guide for deploying Microsoft Defender for Cloud across Azure, multi-cloud, and hybrid environments. It covers activating specific Defender plans for various workloads (servers, containers, storage), optimizing the Secure Score, establishing environment connectors for AWS/GCP, and implementing advanced controls like Just-In-Time (JIT) access for robust, centralized cloud workload protection.

This skill guides the implementation of comprehensive security controls for container registries. It details workflows for vulnerability scanning using Trivy and Grype, generating Software Bill of Materials (SBOMs) with Syft, and enforcing image authenticity using Cosign and Sigstore. It is essential for building robust CI/CD pipelines and preventing supply chain attacks by ensuring only scanned, signed, and compliant images are deployed.

Harbor is an open-source container registry designed for robust security and compliance. This guide details the comprehensive workflow for securing your container ecosystem by implementing advanced features such as vulnerability scanning (Trivy), image signing (Notary/Cosign), Role-Based Access Control (RBAC), and content trust policies. Learn how to enforce image provenance and maintain strict access control in Kubernetes environments.

A comprehensive guide for building or reviewing SwiftUI User Interfaces that utilize the modern Liquid Glass aesthetic. This skill focuses on correctly implementing native Apple APIs (like `glassEffect` and `GlassEffectContainer`) while ensuring proper fallback mechanisms, modifier ordering, and performance for iOS 26+ devices. Ideal for adopting cutting-edge iOS design patterns.

This guide details how to implement secure, keyless software signing using the Sigstore ecosystem components (Cosign, Fulcio, Rekor). It establishes cryptographic provenance for container images and binaries by binding identity via OIDC, ensuring verifiable integrity and tamper-proofing throughout the CI/CD supply chain.

This guide provides comprehensive testing patterns for C# and .NET applications. It covers best practices using xUnit, FluentAssertions, and advanced techniques like mocking (NSubstitute/Moq), parameterized testing, and full integration testing using Testcontainers and WebApplicationFactory. Ideal for improving test quality, coverage, and developing robust, maintainable codebases.

A type-safe dependency injection toolkit for Go, enabling robust and maintainable application architecture. It manages service containers, handling service lifecycles (Lazy, Eager, Transient), scoped services, and dependency resolution. Ideal for refactoring manual constructor injection into a structured DI system in Go projects.

This comprehensive template and guide facilitate the containerization of ASP.NET Core applications. It provides a structured prompt and checklist to ensure that the resulting Dockerfile adheres to industry best practices for performance, security, and maintainability when running on Linux containers. It covers all necessary aspects, including dependency management, port exposure, build stages, and custom configuration.