Practical Docker Security Checklist
- Use trusted and maintained base images.
- Pin application dependencies and release versions.
- Run as a non-root user.
- Drop unnecessary capabilities.
- Do not expose internal services unnecessarily.
- Do not bake secrets into images.
- Scan images and rebuild for security updates.
- Keep Docker Engine/Desktop and the host operating system updated.
ADVERTISEMENT