How does this skill help with PHP-specific Docker security?

It provides specialized patterns for PHP-FPM, including non-root user setups for Alpine/Debian and secure management of Composer credentials during the build process.

Does it support modern Docker features like BuildKit?

Absolutely, it includes specific implementation patterns for using BuildKit secrets to handle sensitive data like private repository tokens without leaking them into image layers.

Is this compatible with Docker Compose and Swarm?

Yes, the skill provides guidance and YAML patterns for both Compose (runtime secrets and network isolation) and Swarm (encrypted secrets management).

Can it detect vulnerabilities in my existing Dockerfiles?

Yes, it includes specific detection patterns to identify common risks like root users, privileged mode, and hardcoded secrets within your project files.

Docker Security Knowledge for PHP

Name: Docker Security Knowledge for PHP
Author: dykyi-roman

bydykyi-roman

•

Security & Testing

Implements industry-standard Docker hardening patterns and security best practices for PHP applications.

This Claude Code skill provides a comprehensive security framework for containerizing PHP applications, offering domain-specific guidance on hardening containers from build to runtime. It equips developers with patterns for non-root user configurations, secure secrets management using BuildKit, and network segmentation strategies. By integrating OWASP Docker Top 10 mitigations and providing detection patterns for common vulnerabilities, this skill helps ensure that PHP microservices are resilient, compliant, and production-ready.

Key Features

01Hardened runtime configurations including read-only filesystems and dropped capabilities

02Non-root user implementation for Alpine and Debian PHP images

0345 GitHub stars

04Automated vulnerability scanning integration with Trivy and Snyk

05Multi-stage build security and minimal base image patterns

06Secure secrets management via BuildKit and Docker Compose

Use Cases

01Hardening existing PHP Docker configurations to meet enterprise security standards

02Implementing secure CI/CD pipelines with automated container vulnerability scanning

03Migrating legacy root-user containers to secure, non-privileged environments

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add dykyi-roman/awesome-claude-code docker-security-knowledge

For use in Claude.ai and ChatGPT

Download Skill