Harden Containers — Development skill for Claude Code
Pin base images by digest, enforce non-root, and harden Dockerfiles.
How to install Harden Containers
Installs to ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-containers/SKILL.md
mkdir -p ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-containers && curl -fsSL https://raw.githubusercontent.com/latiotech/secure-supply-chain-skills/HEAD/commands/harden-containers.md -o ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-containers/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Harden Containers does
description: Pin base images by digest, enforce non-root, and harden Dockerfiles allowed-tools: Read, Write, Edit, Glob, Grep, Bash(docker:*, hadolint:*, git:*, which:*, brew:*) argument-hint: [Dockerfile-path]
Audit and harden container images for supply chain security. **This command takes action by default** - it pins base images to digests, adds non-root users, and fixes Dockerfile issues. Changes are explained as they are made.
Read `${CLAUDE_PLUGIN_ROOT}/skills/supply-chain-harde
Alternatives in Development
- Digest Intro — Digest Intro Prompt 3.2k ★
- Nexting — Remote control for Claude Code, Codex, Grok, and Cursor on Mac or PC 1.3k ★
- Run Daily — Trigger the daily digest now (background via OS scheduler) and monitor until completion 355 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Claude Code Root Runner
🔥 Utility script to run Claude Code CLI with --dangerously-skip-permissions as root by creating temporary non
Harden Packages
Pin dependency versions, disable install scripts, and secure registry configs
Skill Eval Loop
Agent Skill: harden another skill from its automatic agent evals. Score every Claude Code, Codex and Gemini CL
Briefing
Digest matin complet - emails non lus, agenda du jour, taches urgentes. Combine integrations disponibles (Clic
Ecosystem Init
Initialize an ecosystem (once per fork) — write the ecosystem-config (D6), establish the genesis trust-root, s
Minimize
Remove unused dependencies and convert Dockerfiles to multi-stage builds to reduce attack surface
Related Agents
Production Docker Auditor
Audits Dockerfiles and container configuration for production hardening — multi-stage builds, non-root users,
Cacador Config Infra
Caçador do domínio de configuração e infraestrutura na auditoria NIST — Dockerfile como root, imagem base sem
Docker Container Master
Designs, reviews, and hardens Dockerfiles, OCI images, and Docker Compose environments with BuildKit/buildx. D