Docker Hardened Images
-
Aug 25, 2026
Moving from Minimus to Docker Hardened Images
The Minimus registry goes offline on October 22. Here is the migration path, the free help Docker is offering, and where to start.
Vishrut IyengarandRanti FamilusiRead now
-
Aug 18, 2026
17,600 Actions: Agent Security Is a Systems Problem
The OpenAI/Hugging Face incident exposed a new challenge for AI agent security. 17,600 attacker actions show why AI agent security can’t rely on human review. Explore the controls needed to constrain, observe, and govern agents at speed.
Mark CavageRead now
-
Jun 25, 2026
How to Generate an SBOM for Container Workflows
Learn when, where, and how to generate SBOMs for container images. Covers build-time vs. post-build approaches, quality criteria, and CI/CD integration.
Aditya TripathiRead now
-
Jun 25, 2026
EU Cyber Resilience Act: Overview, Requirements, and Timelines
Learn what the EU Cyber Resilience Act requires, including SBOM mandates, vulnerability reporting, and compliance deadlines for container teams.
Dan StelzerandMonique AltmanRead now
-
Jun 23, 2026
What is an SBOM (and Why Can’t You Ship Without One)?
Learn what a software bill of materials (SBOM) is, why it matters for supply chain security, how to generate one, and what formats and standards to use.
Aditya TripathiRead now
-
Jun 8, 2026
5 Software Supply Chain Security Best Practices for Development Teams
Learn the key software supply chain security best practices for container-based delivery, from trusted base images and dependency management to build provenance and runtime monitoring.
Aditya TripathiRead now
-
Jun 4, 2026
Hardened Images Explained: Fewer CVEs, Smaller Attack Surface
Learn what hardened container images are, how they reduce CVE exposure by removing unnecessary packages, and why they’re becoming the standard for secure container deployments.
Aditya TripathiRead now
-
Scanner Integrations May 5, 2026
Precision Container Security with Docker and Black Duck
The complexity of modern containerized applications often leaves developers drowning in a sea of “noise”—vulnerabilities that exist in the file system but pose zero actual risk to the application. The integration between Black Duck and Docker Hardened Images (DHI) provides a definitive answer to this challenge. By combining Docker’s secure-by-default foundations, using VEX (Vulnerability Exploitability…
Jessy McDermottandDan StelzerRead now