Docker supply chain hardening — from Scout D to OpenSSF 7.8 on a 730K-pull image
April 22
14 mins
Episode Description
How I hardened a 1M-pull public Docker image from Scout grade D to OpenSSF Scorecard 7.8 — multi-stage build, cosign, SLSA provenance, non-root default.