cis-docker-v170-5.25
Ensure that cgroup usage is confirmed
☆1.21k repo stars⑂201 repo forks
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
cis-docker-v170-5.26
Ensure that the container is restricted from acquiring additional privileges
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.27
Ensure that container health is checked at runtime
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.28
Ensure that Docker commands always make use of the latest version of their image
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.30
Ensure that Docker's default bridge docker0 is not used
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.31
Ensure that the host's user namespaces are not shared
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.32
Ensure that the Docker socket is not mounted inside any containers
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.4
Ensure that Linux kernel capabilities are restricted within containers
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.5
Ensure that privileged containers are not used
☆1.21k repo stars⑂201 repo forks
DevOps & Security
cis-docker-v170-5.6
Ensure sensitive host system directories are not mounted on containers
☆1.21k repo stars⑂201 repo forks
DevOps & Security