securing-container-registry-images - Securing Container Registry Images
Implements vulnerability scanning, image signing, registry controls, and CI/CD security gates for container images.
Tags
Updated: 2026-09-24Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Scan images for vulnerabilities with Trivy
- Scan images using Grype
- Generate software bill of materials
- Sign container images with Cosign
- Configure container registry security controls
- Build CI/CD security pipelines
Inputs
- Container images
- Container registry access credentials
- Signing key pairs
Outputs
- Vulnerability scan reports
- Software bill of materials files
- Signed container images
- Registry security configurations
Requirements
- Trivy CLI tool
- Grype CLI tool
- Cosign CLI tool
- Syft CLI tool
- Container registry access