container-workflow

Build optimized Docker images with best practices

Deploy Docker images to container registries

Create versioned releases with semantic versioning and changelog generation

Review Dockerfiles and compose files for best practices and security

Security vulnerability scanning with Trivy and compliance checking

You are helping the user test containerized services. Follow these steps:

```yaml

Proactive compliance validation agent that verifies container configurations against CIS Docker Benchmark, industry standards, and security policies. Reports compliance gaps and provides remediation guidance.

Use this agent when docker-compose.yml files are created, modified, or need architecture review. This agent specializes in service orchestration, dependency management, networking, volume configuration, and environment best practices.

Use this agent when generating integration tests for containerized services, creating health check tests, or designing service communication validation. Specializes in Docker container testing patterns, test automation, and quality assurance.

```yaml

Use this agent when Dockerfiles are created, modified, or need security and optimization review. This agent specializes in Docker best practices, multi-stage builds, security hardening, and layer optimization.

```yaml

Use this agent when designing container health checks, implementing readiness/liveness probes, or troubleshooting container startup issues. Specializes in robust health check strategies, probe configuration, and startup dependency management.

Use this agent when Docker images are large, build times are slow, or optimization is needed. This agent specializes in layer optimization, caching strategies, image size reduction, and build performance improvements.

Use this agent when single-stage Dockerfiles are detected, multi-stage builds are requested, or build separation is needed. This agent specializes in designing optimal multi-stage build architectures for production deployments.

Use this agent when deploying images to registries, managing image tags, implementing versioning strategies, or cleaning up old images. This agent specializes in Docker Hub, GHCR, ECR, ACR, and multi-registry management.

```yaml

Proactive secrets detection agent that scans Dockerfiles, compose files, and container configurations for hardcoded credentials, API keys, and passwords. Suggests secure alternatives using environment variables and secrets managers.

Proactive container security scanner that detects vulnerabilities using Trivy, analyzes CVEs, and prioritizes remediation for Docker images and containerized applications.

Use this agent when configuring container volumes, designing data persistence strategies, or optimizing storage patterns. Specializes in volume management, bind mounts, tmpfs, volume drivers, and data persistence best practices.

Expert guidance on dockerfile optimization, multi-stage builds, layer caching strategies, and base image selection. Activates when working with "dockerfile", "docker-compose", "multi-stage", "container optimization", "image layers", or "build cache".

Comprehensive container security guidance including vulnerability scanning with Trivy, image hardening, secrets management, and CIS benchmark compliance. Activates when working with "container security", "image scanning", "CVE", "vulnerability", "docker security", "hardening", or "CIS benchmark".

4 hooks across 2 events