# resolve-docker-vulnerabilities

> Claude/Codex skill by [@firebase](https://omgskills.com/library/firebase/index.md) · 4.5k stars · Updated 2026-08-29

Skill to resolve Docker vulnerabilities for the firebase-cli image. Use this skill when you need to check for vulnerabilities in the firebase-cli Docker image and address them.

## Install

```sh
git clone https://github.com/firebase/firebase-tools /tmp/firebase-tools && ln -s /tmp/firebase-tools/.agent/skills/resolve-docker-vulnerabilities ~/.claude/skills/resolve-docker-vulnerabilities
```

## From README

Resolve Docker Vulnerabilities This skill guides you through the process of listing images, checking for vulnerabilities, planning remediation, and verifying the fixes by publishing to a staging repository. Workflow Publish to Staging Run the build on fir-tools-builds and publish to the staging repository in firebase-cli to see the baseline vulnerabilities after the build's own updates. Check Vulnerabilities Check the vulnerability reports for the image just pushed to staging. You will need to find the digest of the image first. Then check vulnerabilities using the digest: To investigate which layers and file paths are causing the vulnerabilities, run the command with --format=json: Look for fileLocation and layerDetails in the output to understand if the vulnerability is in: Project dependencies (e.g., under /usr/local/nodepackages/nodemodules). Recommend updating the package.json and running the build again.

## Links

- HTML page: https://omgskills.com/skills/firebase/firebase-tools/resolve-docker-vulnerabilities/
- GitHub: https://github.com/firebase/firebase-tools
- Author: [@firebase](https://omgskills.com/library/firebase/index.md)

## More skills by this author

- [developing-genkit-tooling](https://omgskills.com/skills/firebase/genkit/developing-genkit-tooling/index.md) — Best practices for authoring Genkit tooling, including CLI commands and MCP server tools.
   - [@firebase](https://omgskills.com/library/firebase/index.md) · 6.4k stars
- [firebase-ai-logic-basics](https://omgskills.com/skills/firebase/skills/firebase-ai-logic/index.md) — Official skill for integrating Firebase AI Logic (Gemini API) into web applications.
   - [@firebase](https://omgskills.com/library/firebase/index.md) · 430 stars
- [firebase-app-hosting-basics](https://omgskills.com/skills/firebase/skills/firebase-app-hosting-basics/index.md) — Deploys and manages full-stack web applications (Next.js, Angular) with Server-Side Rendering (SSR) using Firebase App...
   - [@firebase](https://omgskills.com/library/firebase/index.md) · 430 stars