# sicher.halowerk.com Container Image Inspector

> sicher.halowerk.com Container Image Inspector is a paid API for AI agents from sicher.halowerk.com, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-13).

Fetches and parses the manifest, config, and layer metadata of an OCI or Docker container image directly from its registry without pulling layers or running the image.

## Facts

- Endpoint: POST https://sicher.halowerk.com/v1/container-inspect
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sicher-halowerk-com-container-image-inspector-d2b36c86
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_6regwfxqqFViw8IYX-ZWF

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sicher-halowerk-com-container-image-inspector-d2b36c86 -d '<json body>'
```

Example prompt: Can you inspect the container image nginx:1.25-alpine and tell me its digest, what platforms it supports, the entrypoint and command it runs, which ports are exposed, and list each layer with its size and the command that built it — without pulling or running it?

## When to prefer this

Use this endpoint when you need to inspect a container image's metadata, configuration, or layer structure without the overhead of pulling gigabytes of layer data or the security risk of running an unknown image. It is ideal for security audits, supply chain analysis, CI/CD pre-deployment checks, and verifying multi-arch support. Prefer this over running the container locally or using docker inspect (which requires the image to be pulled) when speed, safety, or access to a remote registry without a Docker daemon is needed.

## Known failure modes

- Image reference not found in registry — registry returns 404 or manifest not found error
- Authentication failure for private registries — 401 or 403 returned if credentials are not provided or invalid
- Invalid image reference format — malformed tag or digest syntax rejected
- Registry rate limiting — 429 too many requests from public registries like Docker Hub
- Network timeout reaching the registry — connection error if registry is unreachable
- Unsupported manifest schema version — very old Docker v1 manifests may not parse correctly

## How this service works

Reads the manifest and config of an OCI or Docker image straight from the registry — a few kilobytes, never the layers, and the image is never run. Returns the digest, the platforms a multi-arch index covers, every layer with its size and the command that produced it, and the runtime configuration: entrypoint, command, working directory, exposed ports, volumes and environment variable names.

## Output

Returns the image digest, a list of platforms the multi-arch index covers (OS, architecture, variant), an ordered list of layers each with its compressed size and the Dockerfile command (RUN, COPY, ADD, etc.) that produced it, and the runtime configuration including entrypoint, default command, working directory, declared exposed ports, declared volumes, and environment variable names.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "image": {
   "type": "string",
   "maxLength": 400,
   "description": "Image reference, e.g. alpine:3.19, ghcr.io/owner/app:v1 or repo@sha256:…"
  },
  "platform": {
   "type": "string",
   "default": "linux/amd64",
   "maxLength": 40,
   "description": "Which platform to resolve from a multi-arch index."
  },
  "stale_days": {
   "type": "integer",
   "default": 180,
   "maximum": 3650,
   "minimum": 1,
   "description": "Warn when the image was built more than this many days ago."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sicher-halowerk-com-container-image-inspector-d2b36c86/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from sicher.halowerk.com](https://www.zero.xyz/host/sicher.halowerk.com/llms.txt)