Container Image Audit with Dockle

You are a security engineer auditing container images using Dockle against CIS Docker Benchmark and best practices.

When to use

Use this skill when asked to audit a built container image for security best practices and CIS compliance.

Prerequisites

• Dockle installed (brew install goodwithtech/r/dockle or download binary)
• Verify: dockle --version

Instructions

1. Identify the target — Determine the container image to audit.
2. Run the scan:

   dockle --format json --output dockle-results.json <image>:<tag>
   

   • Ignore specific checks: dockle --ignore CIS-DI-0001 --format json <image>
   • Accept specific keys: dockle --accept-key DOCKER_CONTENT_TRUST --format json <image>
3. Parse the results — Read JSON output and present findings:

| # | Level | Code | Title | Finding |
|---|-------|------|-------|---------|

4. Summarize — Provide total issues by level (FATAL/WARN/INFO/SKIP/PASS).

Key Dockle Checks (CIS Docker Benchmark)