container-security
Safeguard articles tagged "container-security" — guides, analysis, and best practices for software supply chain and application security.
446 articles
Container Base Image Selection: A Security-First Decision Framework
Your base image choice determines your container security baseline. Most teams pick based on size or familiarity, not security properties.
Jira and Docker: Integrating Security Workflows
Jira docker integration for security teams usually means auto-filing tickets from container scan findings — here's how to wire it without flooding the backlog with noise.
GCP Binary Authorization: Enforcing Container Trust at Deploy Time
A practical walkthrough of Binary Authorization on GKE, from attestor setup to break-glass procedures and CI/CD integration.
What is the Principle of Least Functionality
The principle of least functionality (NIST CM-7) means shipping only the ports, services, and code a system needs—nothing extra "just in case."
Container Vulnerability Scanning: Comparing the Top Tools in 2023
Not all container scanners are equal. We compared Trivy, Grype, Snyk Container, and others on accuracy, speed, and coverage.
Azure Container Registry Security: Locking Down Your Image Pipeline
How to secure Azure Container Registry with network isolation, content trust, and Microsoft Defender for Containers integration.
Kubernetes RBAC Security Best Practices for Supply Chain Protection
Misconfigured Kubernetes RBAC is a common path to supply chain compromise. Here's how to lock down permissions in your clusters.
GitLab Ultimate Security Features: Built-In Security Done Pragmatically
A review of GitLab Ultimate's security scanning features covering SAST, DAST, dependency scanning, container scanning, and how integrated security compares to best-of-breed tools.
Securing GCP Artifact Registry: A Complete Guide
How to configure GCP Artifact Registry for security-first container and package management, from IAM policies to vulnerability scanning.
Alpine APK Security Model: Small Footprint, Big Trust Decisions
Alpine Linux is the default choice for minimal containers. Its APK package manager has a different security model than apt or dnf, and the tradeoffs matter.
A Healthcare System's Self-Healing Container Rollout
An anonymized account of how a regional North American healthcare system deployed Safeguard's self-healing container base images across 600+ workloads.
Docker MCP Server: Setup and Security Considerations
Running a docker mcp server puts an AI agent's tool access inside a container boundary, which helps containment but doesn't remove the need to scope credentials and network access carefully.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.