Sign in

Terminology Index

Glossary

1 term tagged "dockerfile-security"

Open concept maps

Showing 1-1 of 1 term

D
1

Dockerfile Security

Writing container build files (Dockerfiles) securely, using minimal trusted base images, avoiding embedded secrets, running as non-root, and pinning versions, so the images they produce are secure from the start of the supply chain.

The Dockerfile defines how an image is built, so its choices determine the image's security baseline. Secure practices include starting from minimal, trusted base images, never baking in secrets, running as a non-root user, pinning dependency versions for reproducibility, and removing build tools from the final image. Getting the Dockerfile right is the earliest, cheapest place to prevent vulnerabilities and is a foundational layer in the container security model.

Introduced in: DevSecOps and Secure SDLC

Examples

  • Starting a Dockerfile from a minimal, trusted base image.
  • Avoiding baking secrets into image layers during build.
  • Setting the container to run as a non-root user in the Dockerfile.
cloudadvanceddockerfile-security

No related terms linked yet.