On Docker Hub, there are more than 100,000 prebuild containers and images. Images are a vital component for Docker containers. In fact, containers are built, based on images. That is why you need to assert the authenticity of Docker images. Images are spread everywhere in the internet, so checking Docker images is a must because you don't want to run any arbitrary programs on your infrastructure. To verify a Docker image, use the pull command to verify if the image is signed. In other words, if the pull succeeded, the image is verified. In addition, ensure that your settings matches DOCKER_CONTENT_TRUST=1.
Poisoned images
Get Advanced Infrastructure Penetration Testing now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
