cis-docker-v170-5.13
Ensure that the container's root filesystem is mounted as read only
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
cis-docker-v170-5.14
Ensure that incoming container traffic is bound to a specific host interface
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-v170-5.15
Ensure that the 'on-failure' container restart policy is set to '5'
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-v170-5.16
Ensure that the host's process namespace is not shared
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-v170-5.17
Ensure that the host's IPC namespace is not shared
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-v170-5.18
Ensure that host devices are not directly exposed to containers
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-v170-5.2
Ensure that, if applicable, an AppArmor Profile is enabled
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-v170-5.20
Ensure mount propagation mode is not set to shared
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-v170-5.21
Ensure that the host's UTS namespace is not shared
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-docker-v170-5.22
Ensure the default seccomp profile is not Disabled
1.21k repo starsObserved in 1 repos
DevOps & Security