3 ms·

There are a few commercial container security products too - twistlock, aquasec, neuvector - for those who can't wait.

by markc 9y ago

qmachu 9y ago
Good news, Clair is an open-source tool and has been there for a few years.
hacknat 9y ago
Also notary from docker can prevent MIM injection in the layers as they are being uploaded and downloaded (a surprisingly easy task actually, I think someone did it without having to break SSL).