Post

Docker
@docker.com

The biggest failure in recent supply chain attacks isn't a single vuln, it's implicit trust. Stolen creds poison packages, poisoned packages steal creds, and the loop keeps accelerating. Docker’s CISO breaks down what’s actually happening & what teams can do to reduce risk: https://bit.ly/3NMjF8K

bit.lyDefending Your Software Supply Chain: What Every Engineering Team Should Do Now | DockerThe latest supply chain attack wave is not a single incident to respond to. It is a permanent shift in the threat landscape. In this blog by the Docker CISO Mark Lechner, we share the recommended best...

1 repost0 likes

naugtur
@naugtur.pl

Is there a way scripts could pull Docker Hardened Images without having to log in? I'm working on a tool that I want to distribute to people who otherwise wouldn't bother to isolate their workload, but do have docker installed on their system. Having to log in adds friction to the experience