OpsCart Labs released an open-source Docker security practical guide with 13 hands-on labs covering CIS-aligned auditing, container hardening, vulnerability management, image trust, seccomp, network s…
Echo, in partnership with NanoClaw, eliminated 1,400 CVEs from NanoClaw's container images by using vulnerability scanners, upgrading safe libraries, backporting patches, and replacing the base OS wit…
DockSec, an OWASP Incubator Project, launches to bridge the gap between vulnerability detection and remediation in Docker containers by orchestrating Trivy, Grype, and Docker Scout scanners with an LL…
Vens Labs has released vens-action, a GitHub Action that reranks Trivy and Grype CVE scan results by actual business risk rather than generic CVSS scores. The tool reads scan output alongside a YAML c…