Regardless of the technology platform, container security includes properly securing the image repository.
Regardless of the technology platform, container security includes properly securing the image repository.
Properly securing the image repository is an essential aspect of container security. It ensures that the container images and definition files are adequately protected against unauthorized access or modifications, which helps in preventing potential security breaches and data leaks. Therefore, regardless of the technology platform, container security includes properly securing the image repository.
SG page 98: Regardless of the technology platform, container security includes: • Assuring the security of the underlying physical infrastructure • Assuring the security of the management plane • Properly securing the image repository • Building security into the tasks/code running inside the container
Security Guidance v4.0 >>p.98 Regardless of the technology platform, container security includes: • Properly securing the image repository. The image repository should be in a secure location with appropriate access controls configured. This is both to prevent loss or unapproved modification of container images and definition files, as well as to forestall leaks of sensitive data through unapproved access to the files. Containers run so easily that it’s also important that images are only able to deploy in the right security context.