1.1천건 · 관련도순
bu skill covers hardening container images by minimizing attack surface, removing unnecessary packages, implementing multi-stage builds, configuring non-root users, and applying CIS Docker Benchmark recommendations to produce secure production-ready images.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Docker Bench for Security is an open-source script that checks dozens of common best practices around Dağıt:ing Docker containers in production. Based on the CIS Docker Benchmark, it audits host confi
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Scan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Securing container registry images by implementing vulnerability scanning with Trivy and Grype, enforcing image signing with Cosign and Sigstore, configuring registry access controls, and building CI/CD pipelines that prevent Dağıt:ing unscanned or unsigned images.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use when you need to write or improve integration tests for Quarkus — including @QuarkusTest, Dev Services for automatic container provisioning, Testcontainers via QuarkusTestResourceLifecycleManager, WireMock for external HTTP stubs, @QuarkusIntegrationTest for black-box testing against packaged artifacts, REST Assured, data isolation strategies (@TestTransaction vs @BeforeEach cleanup), and Maven Surefire/Failsafe three-tier split (*Test, *IT, *AT). This should trigger for requests such as Add or improve integration tests in a Quarkus project; Configure Testcontainers or Dev Services for Quarkus tests; Add WireMock stubs for external HTTP dependencies in Quarkus integration tests; Set up @QuarkusIntegrationTest for packaged artifact or native binary testing; Fix test data isolation or configure Maven Surefire/Failsafe split. Part of cursor-rules-java project
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Detect container escape attempts in real-time using Falco runtime security rules that monitor syscalls, file access, and privilege escalation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Apple データ永続化・データフロー・ネットワーク・ユーティリティリファレンス。SwiftData / Core Data / Foundation / Combine。 @Model, ModelContainer, ModelContext, @Query, Predicate, FetchDescriptor, SectionedResults, ResultsObserver, NSManagedObject, NSFetchRequest, NSFetchedResultsController, NSPersistentContainer, NSPersistentCloudKitContainer, NSStagedMigrationManager, URLSession, JSONDecoder, JSONEncoder, Publisher, sink, Future, AsyncPublisher, @Published, AnyCancellable
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Azure Container Registry SDK for Python. Use for managing container images, artifacts, and repositories.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Azure Container Registry SDK for Python. Use for managing container images, artifacts, and repositories.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Architect scalable styling systems with Tailwind v4, CSS Modules, design tokens, dynamic theming, and container queries. Activate on: design tokens, theming system, Tailwind config, CSS architecture, container queries, dark mode. NOT for: component library creation (use design-system-creator), animation systems (use animation-system-architect).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Runs Docker Desktop and its WSL2 layer, checking RAM and disk before container work. Trigger when Docker Desktop or a container won't start, vmmem eats RAM or the Docker disk keeps growing; to set a WSL memory cap in .wslconfig; to list or install WSL distros; to bring a compose stack up or down; to prune images and build cache; to run a command in a container; to log in to a registry; or say dockerrunner (audit, check, up, down, prune, status, refresh). Local LLMs (Docker Model Runner too) are lmstudiorunner's; images comfyrunner's; VMs and sandboxes hypervrunner's; Docker's MCP catalog its MCP Toolkit's; registry tokens keywarden's.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Generates DI Container configuration for PHP 8.5. Creates module classes, service providers, container configuration, and autowiring setup. Supports Symfony, Laravel, and PHP-DI patterns. Includes unit tests.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Generates PSR-11 Container implementation for PHP 8.5. Creates ContainerInterface with service resolution, autowiring support, and exceptions. Includes unit tests.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Azure Container Registry SDK for Python. Use for managing container images, artifacts, and repositories.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Complete guide for .NET Aspire Testing integration testing framework. Use when testing .NET Aspire distributed applications, configuring AppHost tests, or migrating from Testcontainers to Aspire testing. Covers DistributedApplicationTestingBuilder, container lifecycle management, multi-service orchestration, Respawn configuration, and time testability design. Keywords: aspire testing, .NET Aspire, DistributedApplicationTestingBuilder, AppHost testing, distributed testing, AspireAppFixture, IAsyncLifetime, ContainerLifetime.Session, cloud-native testing, multi-service integration, Aspire.Hosting.Testing, Respawn
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Complete guide for ASP.NET Core Web API integration testing. Use when performing integration testing on Web API endpoints or validating ProblemDetails error format. Covers WebApplicationFactory, IExceptionHandler, Testcontainers multi-container orchestration, Flurl URL construction, and AwesomeAssertions HTTP validation. Keywords: webapi integration testing, WebApplicationFactory, asp.net core integration test, webapi integration test, IExceptionHandler, ProblemDetails, ValidationProblemDetails, AwesomeAssertions, Flurl, Respawn, Be201Created, Be400BadRequest, multi-container testing, Collection Fixture, global exception handling
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Containerizes .NET apps. Multi-stage Dockerfiles, SDK container publish (.NET 8+), rootless.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Detect container escape attempts in real-time using Falco runtime security rules that monitor syscalls, file access, and privilege escalation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Hunt Kubernetes & Docker — API anonymous access, kubelet 10250 exec (SPDY/WebSocket, NOT plain POST) and the simpler /run primitive, etcd 2379 unauth, dashboard skip-login, RBAC misconfig, secret/SA-token abuse, docker.sock host escape, runc/container-escape (Leaky Vessels CVE-2024-21626), API-server-mediated nodes/proxy RCE, EphemeralContainers node-shell, bound/projected SA-token audience+expiry abuse, admission-controller bypass, Helm/Tiller remnants. Use when target runs containerized infra, exposes K8s ports (6443/10250/10255/2379/8443), or cloud metadata reveals K8s service accounts.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Kubernetes cluster attack techniques covering the full attack lifecycle from initial foothold in a pod to cluster-wide compromise. Covers service account token theft and impersonation, RBAC misconfiguration exploitation including wildcard permissions and privilege escalation via role binding, direct etcd access for secret extraction, kubelet API abuse on port 10250 and read-only port 10255, pod escape via hostPID hostNetwork and hostPath volume mounts, Kubernetes secrets enumeration and decoding, admission controller bypass techniques, network policy bypass and lateral movement, cloud metadata service access from pods for credential theft on AWS EKS GCP GKE and Azure AKS, CRD and operator abuse for persistence, and node compromise via DaemonSet deployment. Tools include kubectl, kube-hunter, peirates, kubeaudit, kdigger, kubeletctl. Maps to MITRE ATT&CK T1609 Container Administration Command, T1610 Deploy Container, T1613 Container and Resource Discovery. Use this skill when assessing Kubernetes clusters,...
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Docker containerization expert with deep knowledge of multi-stage builds, image optimization, container security, Docker Compose orchestration, and production deployment patterns. Use PROACTIVELY for Dockerfile optimization, container issues, image size problems, security hardening, networking, and orchestration challenges.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Debug container agent issues. Use when things aren't working, container fails, authentication problems, or to understand how the container system works. Covers logs, environment variables, mounts, and common issues.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Spring Boot 변경 사항을 빌드, 정적 분석, 테스트, 보안 검사로 검증합니다. 코드 차이도 검토해 배포 전 통과 여부와 수정할 문제를 정리합니다.