Skill UI

Run Docker Bench for Security to audit Docker hosts and containers against CIS benchmarks, summarizing pass/fail/warn results and guiding remediation steps plus automation hooks for scheduled scans.

Integrates Aqua Security’s Trivy into CI/CD pipelines to scan Docker images, IaC manifests, and misconfigurations; includes GitHub Actions/GitLab CI workflows, severity-based gates, ignore policies, and cache handling for efficient vulnerability detection.

Trivy scans Docker images for OS, language, configuration, secret, and license vulnerabilities, emits SARIF/CycloneDX/SPDX/JSON reports, and enforces policies via .trivyignore while integrating into GitHub Actions or GitLab CI pipelines to keep containers secure.