Vladimir Mikhalev

One of fewer than 250 Docker Captains worldwide. Solutions Architect for container infrastructure, security, and cloud-native systems. Technical Editor of "Docker & Kubernetes Security." I test what ships — and publish what I find.

#Container Security

1 post tagged

Docker supply chain hardening — from Scout D to OpenSSF 7.8 on a 730K-pull image

2026-04-22

DevOps & Cloud

How I hardened a 1M-pull public Docker image from Scout grade D to OpenSSF Scorecard 7.8 — multi-stage build, cosign, SLSA provenance, non-root default.

#Docker #Container Security #DevSecOps #CI/CD +2 more

2629 words 13 min read

Cover image for Docker supply chain hardening — from Scout D to OpenSSF 7.8 on a 730K-pull image