Docker Security Best Practices from the Dockerfile

Docker and container security are broad problem spaces and there are many low hanging fruits one can harvest to mitigate risks. A good starting point is to follow some best practices when writing Dockerfiles. I’ve compiled a list of common docker security issues and how to avoid them. For every issue I’ve also written an Open Policy Agent (OPA) rule ready to be used to statically analyze your Dock

[braitom]

Dockerfileでセキュリティ問題を回避するためのベストプラクティス。Secret情報を保存しない、Base imageにlatestタグを使わない、curl bashingを避けるなど。