Containers
In-depth guides and analysis on containers from the Safeguard engineering team.
100 articles
Docker Privileged Mode: What --privileged Really Grants and Safer Options
Docker Compose privileged mode hands a container nearly all host capabilities. Here is what --privileged actually turns on, and the scoped alternatives that do the same job safely.
Docker Privileged Containers: `docker run` and Compose Risks
docker run privileged and docker compose privileged both hand a container root-equivalent access to the host — here's exactly what that means and when, if ever, it's justified.
Kubernetes securityContext: fsGroup and the Fields People Skip
A field-by-field walkthrough of Kubernetes securityContext — fsGroup, runAsNonRoot, and the settings teams leave at their insecure defaults.
Container Vulnerability Management: The Full Lifecycle
Container vulnerability management is a lifecycle, not a scan — here's what happens from base image selection through runtime, and where most programs quietly fall apart.
Secure Docker Images: A Practical Checklist
A working checklist for building secure Docker images, from base image choice through image scanning, that you can actually apply to an existing Dockerfile this week.
Docker Image Scanning: How It Works and What It Finds
Scanners don't run your container — they unpack it. How docker image scanning inventories layers, matches CVEs, handles distro backports, and where it belongs in your pipeline.
Docker Security Concerns: The Real List
Docker security concerns that actually cause incidents are narrower than most checklists suggest — root-by-default containers, exposed daemon sockets, and unpatched base images account for most real-world breaches.
Docker Vulnerability News: What Recent Container CVEs Mean for You
Keeping up with Docker vulnerability news matters because container escapes turn a compromised app into a compromised host. Here is how to read the headlines and act on them.
Kubernetes Ingress TLS: Setup, Certificates, and Common Mistakes
How Ingress TLS works in Kubernetes: terminating HTTPS at the ingress, wiring TLS secrets, automating certificates with cert-manager, and the mistakes that break it.
Docker Images Format Explained: Layers, OCI, and Security
Understanding the Docker images format, from layers and manifests to the OCI spec, is the foundation for scanning, signing, and hardening what you ship.
Choosing a Docker Security Tool: What Actually Matters
A Docker security tool scans images, configs, and running containers for risk. Here is what each category covers and how to pick one that fits your workflow.
Dockerfile Best Practices: Security, Size, and Build Speed
Most Dockerfiles are copy-pasted from a tutorial and never revisited. Here's what actually shrinks image size, closes the common security holes, and speeds up rebuilds.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.