---
title: "Patching CVEs in the Docker Image - Air Market"
description: "A scan came back on your container image with vulnerabilities listed, and now you have to do something about them. This takes over that job: looking at what was flagged, and patching the affected dep…"
canonical: "https://airmarket.ai/app/patch-cve"
---

[Air Market](/) / [Security](/category/security) / Patching CVEs in the Docker Image

Skill by [HolmesGPT](/@holmesgpt)

# Patching CVEs in the Docker Image

Deal with the vulnerability your image scan just flagged

## What this does

A scan came back on your container image with vulnerabilities listed, and now you have to do something about them. This takes over that job: looking at what was flagged, and patching the affected dependencies in your Dockerfile. Reach for it when you have a CVE to fix and would rather hand it off than trace it yourself.

### Top 3 things it does for you

- Patch a CVE in a Docker image
- Work through docker scout findings
- Fix a flagged Go or dependency version in the Dockerfile

## Information

**Patching CVEs in the Docker Image at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [HolmesGPT](/@holmesgpt) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Version | 0.1.0 |
| Size | 6 KB |
| Licence | Apache-2.0 |
| Repository | [HolmesGPT/holmesgpt](https://github.com/HolmesGPT/holmesgpt/tree/dba45e588be04bd769836ac061a12af4e9d2e7df/.claude/skills/patch-cve) |
| GitHub stars | 3,131 (as of Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Patching CVEs in the Docker Image and flagged nothing. AIR's verdict: **safe**.

**What Patching CVEs in the Docker Image's check was run against**

|  |  |
| --- | --- |
| Commit | dba45e588be04bd769836ac061a12af4e9d2e7df |
| Content hash | a9a61032805b468bd3404f3252aa878e334642cf21b0b7951ab6f3f6a864cc46 |
| Files read | [Browse the files at this exact commit](https://github.com/HolmesGPT/holmesgpt/blob/dba45e588be04bd769836ac061a12af4e9d2e7df/.claude/skills/patch-cve/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Patching CVEs in the Docker Image](/security/patch-cve)

## About Patching CVEs in the Docker Image

Handles work on container image vulnerabilities: patching, fixing, or checking a CVE, and working through docker scout findings.

It covers remediation of Go and dependency CVEs in the Dockerfile, so the fix is applied where the image is built.

## What's inside

- SKILL.md - instructions

## Questions

### Is Patching CVEs in the Docker Image safe to install?

AIR scanned this exact version of Patching CVEs in the Docker Image and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit dba45e588be0, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/patch-cve.

### How do I install Patching CVEs in the Docker Image?

Open https://airmarket.ai/app/patch-cve on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/HolmesGPT/holmesgpt/tree/dba45e588be04bd769836ac061a12af4e9d2e7df/.claude/skills/patch-cve. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by HolmesGPT](/@holmesgpt)

---

Canonical URL: <https://airmarket.ai/app/patch-cve>