Tag
non-root-containers
Safeguard articles tagged "non-root-containers" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Container Security
Minimal, Non-Root Docker Images for Python: A Best-Practices Guide
CVE-2019-5736 let a malicious container overwrite the host runc binary via root access. Here's how multi-stage, non-root builds close that door for Python apps.
Jul 16, 20266 min read
Container Security
Building a minimal, multi-stage, non-root Dockerfile for PHP
The official php:fpm image still runs its master process as root — a documented, still-open issue. Here's how to build a PHP Dockerfile that doesn't.
Jul 8, 20267 min read