cis-docker-3.9
Ensure that TLS CA certificate file ownership is set to root:root
☆1.21k repo stars⑂201 repo forks
DevOps & Security
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that TLS CA certificate file ownership is set to root:root
Ensure that a user for the container has been created
Ensure secrets are not stored in Dockerfiles
Ensure only verified packages are installed
Ensure all signed artifacts are validated
Ensure that containers use only trusted base images
Ensure that unnecessary packages are not installed in the container
Ensure Content trust for Docker is Enabled
Ensure that HEALTHCHECK instructions have been added to container images
Ensure update instructions are not used alone in Dockerfiles