cis-docker-v170-4.5
Ensure Content trust for Docker is Enabled
☆1.21k repo stars⑂201 repo forks
DevOps & Security
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure Content trust for Docker is Enabled
Ensure that HEALTHCHECK instructions have been added to container images
Ensure update instructions are not used alone in Dockerfiles
Ensure setuid and setgid permissions are removed
Ensure that COPY is used instead of ADD in Dockerfiles
Ensure swarm mode is not Enabled, if not needed
Ensure that the host's network namespace is not shared
Ensure that the memory usage for containers is limited
Ensure that CPU priority is set appropriately on containers
Ensure that the container's root filesystem is mounted as read only