cis-docker-v170-5.14
Ensure that incoming container traffic is bound to a specific host interface
☆1.21k repo stars⑂201 repo forks
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
cis-docker-v170-5.15
Ensure that the 'on-failure' container restart policy is set to '5'
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.16
Ensure that the host's process namespace is not shared
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.17
Ensure that the host's IPC namespace is not shared
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.18
Ensure that host devices are not directly exposed to containers
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.2
Ensure that, if applicable, an AppArmor Profile is enabled
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.20
Ensure mount propagation mode is not set to shared
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.21
Ensure that the host's UTS namespace is not shared
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.22
Ensure the default seccomp profile is not Disabled
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.24
Ensure that docker exec commands are not used with the user=root option
☆1.21k repo stars⑂201 repo forks
DevOps & Security