Headless Cloud Securityhttps://docs.sysdig.com/en/release-notes/headless-cloud-security-release-notes/Recent content on Headless Cloud SecurityenThu, 07 May 2026 14:36:30 +0100 https://docs.sysdig.com/icons/sysdig-horizontal.pngHeadless Cloud Securityhttps://docs.sysdig.com/en/release-notes/headless-cloud-security-release-notes/Sysdig logoHeadless Cloud Security - 0.1.0 May 06, 2026https://docs.sysdig.com/en/release-notes/headless-cloud-security-release-notes/#0.1.0-may-06-2026Sysdig Headless Cloud Security packages Sysdig cloud security workflows as reusable agent skills that run inside AI coding agents such as Claude Code. The integration enables users to onboard environments, investigate vulnerabilities and runtime threats, remediate risks, and manage posture workflows without leaving their AI environment.<h4 id="sysdig-headless-cloud-security-public-beta">Sysdig Headless Cloud Security (Public Beta)</h4> <p>Sysdig Headless Cloud Security packages Sysdig cloud security workflows as reusable agent skills that run inside AI coding agents such as Claude Code. The integration enables users to onboard environments, investigate vulnerabilities and runtime threats, remediate risks, and manage posture workflows without leaving their AI environment.</p>0.1.0 May 06, 2026Headless Cloud Security - Install in Claude Codehttps://docs.sysdig.com/en/release-notes/headless-cloud-security-release-notes/#install-in-claude-codeAdded the sysdig-onboarding skill for onboarding cloud accounts and Kubernetes clusters into Sysdig Secure.
  • /plugin marketplace add sysdig/skills
  • /plugin install headless-cloud-security@sysdig-skills

    • New Skills

    sysdig-onboarding

    Added the sysdig-onboarding skill for onboarding cloud accounts and Kubernetes clusters into Sysdig Secure.

    The skill can:

    • Guide you through onboarding interactively or through an autonomous workflow
    • Generate Terraform configurations for cloud account onboarding
    • Generate Helm values for Kubernetes onboarding
    • Validate prerequisites
    • Deploy onboarding configurations
    • Verify connectivity after deployment

    sysdig-investigate

    Added the sysdig-investigate skill for identifying and prioritizing vulnerable container images in Sysdig-monitored environments.

    The skill can:

    • Rank vulnerable images using configurable risk metrics
    • Generate remediation plans
    • Create tracking tickets in Jira, Linear, or GitHub Projects
    • Recommend assignees using Sysdig risk and exposure signals
    • Hand off remediation workflows to sysdig-remediate

    sysdig-remediate

    Added the sysdig-remediate skill for remediating vulnerable container images.

    The skill can:

    • Retrieve Critical and High CVEs from Sysdig
    • Identify safe fix versions through dependency chain analysis
    • Generate minimal remediation patches
    • Open pull requests or merge requests in GitHub or GitLab
    • Generate .patch files for local repositories
    • Persist image-to-repository mappings and reviewer history across sessions

    sysdig-posture

    Added the sysdig-posture skill for authoring Sysdig Secure Posture custom controls and policies.

    The skill supports:

    • Rego-based custom control authoring
    • Custom policy creation
    • Terraform generation using the Sysdig Terraform provider
    • Rego validation
    • Policy and control discovery workflows

    API access is read-only. All configuration changes are managed through Terraform.

    sysdig-runtime-investigate

    Added the sysdig-runtime-investigate skill for investigating runtime threats detected by Sysdig.

    The skill can:

    • Identify the highest-priority runtime threat
    • Enumerate affected container images
    • Correlate runtime activity with vulnerabilities
    • Analyze network blast radius
    • Perform VirusTotal lookups for suspicious binaries
    • Escalate investigations to Jira or PagerDuty workflows

    Known Issues

    • The sysdig-onboarding skill is currently optimized for AWS environments. Expanded Azure and GCP support is planned for upcoming releases.
    • Claude Code is the primary supported AI coding agent, and the skills are optimized for its capabilities.
    • Other MCP-compatible agents, including Cursor, OpenAI Codex, and OpenCode, can use the skills through the npx skills CLI command, but are not officially supported at this time.
    ]]>    Install in Claude Code