image auditing

How to Ensure the Security of Your Container Images During Build?

I've been exploring our container supply chain and it's quite alarming. We pull base images from Docker Hub and npm packages from uncertain sources, plus our build process…