domains / families / security / securing-container-registry-images

securing-container-registry-images

separate

'Secures container registry images (ECR, ACR, GCR, Docker Hub) by scanning

When to use

• When establishing security controls for container image registries (ECR, ACR, GCR, Docker Hub)
• When building CI/CD pipelines that enforce vulnerability scanning before image promotion
• When implementing image signing and verification to prevent supply chain attacks
• When auditing existing registries for vulnerable, unscanned, or unsigned images
• When compliance requires software bill of materials (SBOM) for deployed container images

When not to use

• runtime container security
• Kubernetes admission control
• host-level vulnerability scanning

Skill page

Source