owasp-docker
用于识别、评估和修复容器化Docker环境中安全风险的OWASP Docker Top 6漏洞知识库——由…提供
npx skills add https://github.com/microsoft/hve-core --skill owasp-dockerOWASP® Docker Top 6 — Skill Entry
This SKILL.md is the entrypoint for the OWASP Docker Top 6 skill.
The skill encodes the OWASP Docker Security Top 6 as structured, machine-readable references that an agent can query to identify, assess, and remediate Docker container security risks.
Normative references (Docker Top 6)
- 00 Vulnerability Index
- 01 Secure User Mapping
- 02 Patch Management Strategy
- 03 Network Segmentation and Firewalling
- 04 Secure Defaults and Hardening
- 05 Maintain Security Contexts
- 06 Resource Protection
Skill layout
SKILL.md— this file (skill entrypoint).references/— the Docker Top 6 normative documents.00-vulnerability-index.md— index of all vulnerability identifiers, categories, and cross-references.01through06— one document per vulnerability aligned with OWASP Docker Security numbering.
Third-Party Attribution
Copyright © OWASP Foundation. OWASP® Docker Top 10 content is derived from works by the OWASP Foundation, licensed under CC BY-NC-SA 4.0 (https://creativecommons.org/licenses/by-nc-sa/4.0/). Source: https://owasp.org/www-project-docker-top-10/ Modifications: Vulnerability descriptions restructured into agent-consumable reference documents with added detection and remediation guidance. OWASP® is a registered trademark of the OWASP Foundation. Use does not imply endorsement.