Skip to content

Latest commit

 

History

History
28 lines (15 loc) · 994 Bytes

File metadata and controls

28 lines (15 loc) · 994 Bytes

devsecops config notes

docker desktop download

https://www.docker.com/products/docker-desktop/

docker scout commands to check image security

cmd: docker scout cves $APP_IMAGE:$VERSION --output ./vulns.report cmd: docker scout cves $APP_IMAGE:$VERSION --only-severity critical --exit-code

Alpine Images

  • The Alpine Docker image is ultra-lightweight, security-oriented base image, only occupy ~5MB disc space, based on Alpine Linux

cmd: FROM alpine:latest

Distroless Images Guide

Distroless Images Article Site

nginx distroless-image: url link

cmd: docker pull cgr.dev/chainguard/nginx OR Add in Dockerfile FROM cgr.dev/chainguard/nginx:latest

docker sbom report

cmd: docker scout sbom --output $APP_IMAGE.sbom $APP_IMAGE:$VERSION