Last Updated: November 21, 2025
Focus Areas
| Focus |
|---|
Run as non-root
|
Limit installed packages
|
Commands & Queries
docker build --target prod
Build multi-stage
scan-image.sh
Scan
docker push
Publish
Summary
Secure Dockerfiles reduce attack surface.
💡 Pro Tip:
Pin base images and run scans in CI.