스킬 multi-stage-dockerfile

📦

multi-stage-dockerfile

Name: multi-stage-dockerfile
Author: github

콘텐츠 리비전 r1 안전 ⚙️ 외부 명령어

Create Lean Multi-Stage Dockerfiles

Container images can retain unnecessary build tools and rebuild dependencies too often. This skill guides Dockerfile design with separate build stages, efficient caching, and minimal runtime dependencies.

지원: Claude Codex Code(CC)

🥉 77 브론즈

Maintain this Skill? Claim it 🥉 77 브론즈

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "multi-stage-dockerfile" from https://skillstore.io/skills/github-multi-stage-dockerfile.md and its manifest at https://skillstore.io/api/skills/github-multi-stage-dockerfile/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/github-multi-stage-dockerfile.md 서명된 manifest GET /api/skills/github-multi-stage-dockerfile/manifest 서명된 lockfile GET /api/skills/github-multi-stage-dockerfile/lockfile

테스트해 보기

"multi-stage-dockerfile" 사용 중입니다. Review a Node.js image that includes build tools and development dependencies at runtime.

예상 결과:

Use a builder stage to install dependencies and compile the application.
Keep only production dependencies and required application artifacts in the runtime stage.
Select a non-root runtime user and verify access to required files.
Test application startup before comparing final image sizes.

"multi-stage-dockerfile" 사용 중입니다. Dependency installation repeats whenever application source files change.

예상 결과:

Copy dependency manifests before application source files.
Install dependencies in an earlier layer to preserve its cache when only source files change.
Exclude unnecessary files from the build context.
Compare successive builds to verify cache reuse.

보안 감사

안전

v1 • 2026. 9. 29. 버전별 보고서 열기

All seven static findings are false positives involving Markdown code spans or defensive Docker guidance. No evidence found of prompt injection, data exfiltration, or malicious execution in SKILL.md. The skill provides instructions, not executable tooling or verified security guarantees.

스캔된 파일

분석된 줄 수

검토 항목

오탐 무시됨

위험 요인

⚙️ 외부 명령어 (5)

SKILL.md:13 SKILL.md:19 SKILL.md:28 SKILL.md:29 SKILL.md:34

가장 최근에 완료된 정적·의미론적 감사에서 확인된 보안 발견 사항이 감지되지 않았습니다. 이는 스킬에 부작용이 없음을 증명하지 않습니다.

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/github-multi-stage-dockerfile/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/github-multi-stage-dockerfile/security.svg)](https://skillstore.io/skills/github-multi-stage-dockerfile?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/github-multi-stage-dockerfile?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/github-multi-stage-dockerfile/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/github-multi-stage-dockerfile.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

github. (2026). multi-stage-dockerfile security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/github-multi-stage-dockerfile/audits/1

BibTeX 인용

@techreport{github-github-multi-stage-dockerfile-2026,
  author = {github},
  title = {multi-stage-dockerfile security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/github-multi-stage-dockerfile/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "multi-stage-dockerfile security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "github"
date-released: "2026-09-29"
url: "https://skillstore.io/skills/github-multi-stage-dockerfile/audits/1"
identifiers:
  - type: other
    value: "skillstore:github-multi-stage-dockerfile:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Containerize an Application

Create separate build and runtime stages while preserving the dependencies and startup behavior an application needs.

Improve CI Build Efficiency

Review dependency installation order and build context contents to reduce avoidable cache invalidation.

Review Runtime Image Hardening

Assess runtime users, file permissions, base image choices, and unnecessary packages before deployment.

이 프롬프트를 사용해 보세요

Start a Multi-Stage Dockerfile

Create a multi-stage Dockerfile for my [language and framework] application. Ask for missing build commands, startup commands, and runtime requirements.

Separate Build and Runtime Dependencies

Review my Dockerfile and separate build dependencies from runtime requirements. Explain which artifacts must be copied and which tools can be excluded.

Optimize Build Caching

Review my Dockerfile and project structure for caching improvements. Suggest layer ordering and build context exclusions, then explain how to test the changes.

Assess Production Readiness

Review my multi-stage Dockerfile for production deployment. Evaluate base image compatibility, non-root permissions, artifact selection, runtime environment settings, and health checks. Identify assumptions requiring verification.

모범 사례

Provide build commands, startup requirements, and native dependency constraints before requesting a Dockerfile.
Build and test the final image, including health checks and non-root file access.
Use image digests for immutable references and secret mounts for sensitive build credentials.

피하기

Copying the entire builder filesystem into the runtime image.
Choosing Alpine or distroless images without checking dependency and health check compatibility.
Assuming separate build stages automatically remove secrets from intermediate layers and build caches.

자주 묻는 질문

Which assistants can use this skill?

The skill is listed for Claude, Codex, and Claude Code.

Does it support my language or framework?

Its guidance is language-independent. You must supply the build process, runtime requirements, and compatibility constraints for your project.

Does this skill build or scan images automatically?

No. It contains written guidance and recommends vulnerability scanning, but includes no build automation or scanner.

Will a multi-stage build always make my image smaller?

No. Size depends on base images, runtime dependencies, and copied artifacts. Measure the resulting image after testing.

Do explicit version tags guarantee reproducible builds?

No. Tags can change. Use image digests and locked dependencies when you need stronger reproducibility.

Are build secrets safe in a separate builder stage?

Not automatically. Secrets can remain in intermediate layers or caches. Use build secret mounts and avoid embedding credentials in image instructions.

개발자 세부 정보

작성자

github

라이선스

MIT

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/github/awesome-copilot/tree/997e95a6e42869c350f8ca6ec4c066287697c9f0/skills/multi-stage-dockerfile

참조

bad9dafc37d1638cd29cb9bab06d5f8dbcd0f6c2

유지보수 최신성

2026. 9. 30.

사용량

0 다운로드 · 0 조회

파일 구조

📄 SKILL.md