Container Security
The practices and tools used to protect containerized applications and their underlying infrastructure throughout their lifecycle.
Container security↗ covers the practices and tools used to protect containerized applications, lightweight, portable software packages like those built with Docker, throughout their entire lifecycle: the base images they're built from, the registries that store them, and the runtime environment where they execute.
Because containers are often built from shared public images and deployed rapidly at scale, a single vulnerable or misconfigured image can be replicated across an entire environment in minutes. Scanning images for known vulnerabilities before deployment and restricting container privileges at runtime are core container security practices.