cis-docker-4.7
Ensure update instructions are not used alone in Dockerfiles
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
cis-docker-5.11
Ensure that the memory usage for containers is limited
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-5.12
Ensure that CPU priority is set appropriately on containers
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-5.13
Ensure that the container's root filesystem is mounted as read only
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-5.14
Ensure that incoming container traffic is bound to a specific host interface
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-5.15
Ensure that the 'on-failure' container restart policy is set to '5'
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-5.16
Ensure that the host's process namespace is not shared
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-5.18
Ensure that host devices are not directly exposed to containers
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-5.2
Ensure that, if applicable, an AppArmor Profile is enabled
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-5.20
Ensure mount propagation mode is not set to shared
1.21k repo starsObserved in 1 repos
DevOps & Security