Docker supply chain hardening — from Scout D to OpenSSF 7.8 on a 730K-pull image

April 22
14 mins

Episode Description

How I hardened a 1M-pull public Docker image from Scout grade D to OpenSSF Scorecard 7.8 — multi-stage build, cosign, SLSA provenance, non-root default.
See all episodes