cis-docker-v170-4.4
Ensure images are scanned and rebuilt to include security patches
1.21k repo starsObserved in 1 repos
DevOps & Security
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure images are scanned and rebuilt to include security patches
Ensure Content trust for Docker is Enabled
Ensure that HEALTHCHECK instructions have been added to container images
Ensure update instructions are not used alone in Dockerfiles
Ensure setuid and setgid permissions are removed
Ensure that COPY is used instead of ADD in Dockerfiles
Ensure swarm mode is not Enabled, if not needed
Ensure that the host's network namespace is not shared
Ensure that the memory usage for containers is limited
Ensure that CPU priority is set appropriately on containers